kern/174276: if_ath memory modified after free

[Poul-Henning Kamp]

>Number:         174276
>Category:       kern
>Synopsis:       if_ath memory modified after free
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Dec 08 10:30:00 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator:     Poul-Henning Kamp
>Release:        FreeBSD 10.0-CURRENT amd64
>Organization:
>Environment:
System: FreeBSD critter.freebsd.dk 10.0-CURRENT FreeBSD 10.0-CURRENT #0 r238860M: Sat Jul 28 13:18:52 UTC 2012 root at critter.freebsd.dk:/usr/obj/freebsd/head/sys/CRITTER amd64


>Description:

	ath0: ath_rx_proc: kickpcu; handled 1 packets
	ath0: ath_rx_proc: kickpcu; handled 1 packets
	Memory modified after free 0xfffffe003cdff800(2048) val=80 @ 0xfffffe003cdff800
	ath0: ath_rx_proc: kickpcu; handled 1 packets
	Memory modified after free 0xfffffe003cb8a800(2048) val=80 @ 0xfffffe003cb8a800
	ath0: ath_rx_proc: kickpcu; handled 1 packets
Memory modified after free 0xfffffe003cda1800(2048) val=80 @ 0xfffffe003cda1800


>How-To-Repeat:
	
>Fix:

	


>Release-Note:
>Audit-Trail:
>Unformatted: