[Bug 211486] [panic] [IPSec] [IP6] Crash with IPv6 ESP usage

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Aug 2 11:56:59 UTC 2016


Andrey V. Elsukov <ae at FreeBSD.org> changed:

           What    |Removed                     |Added
           Assignee|freebsd-bugs at FreeBSD.org    |ae at FreeBSD.org
             Status|New                         |In Progress

--- Comment #4 from Andrey V. Elsukov <ae at FreeBSD.org> ---
Created attachment 173191
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=173191&action=edit
Proposed patch

Can you test this patch? It looks like it should help.
As I understand from your backtrace, your host is going to send TCP ACK via
ip6_output, it handled by ip6_ipsec_output(), due to presence of corresponding
IPSec policy. But, since *ro* pointer is zero and wasn't initialized yet, NULL
pointer dereference occurs in listed by you check. Also ro_flags has 0x1a
offset in the struct route_in6 (fault addres is 0x1a).

You are receiving this mail because:
You are the assignee for the bug.

More information about the freebsd-bugs mailing list