[Bug 279653] Page fault in in6_selecthlim

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=279653

--- Comment #18 from [email protected] ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=b5c46895fdddcdb7dd1994598925d6989ea7c8f2

commit b5c46895fdddcdb7dd1994598925d6989ea7c8f2
Author:     Zhenlei Huang <[email protected]>
AuthorDate: 2025-09-03 19:16:40 +0000
Commit:     Zhenlei Huang <[email protected]>
CommitDate: 2025-09-03 19:16:40 +0000

    ifnet: Defer detaching address family dependent data

    While diagnosing PR 279653 and PR 285129, I observed that thread may
    write to freed memory but the system does not crash. This hides the
    real problem. A clear NULL pointer derefence is much better than writing
    to freed memory.

    PR:     279653
    PR:     285129
    Reviewed by:    glebius
    MFC after:      3 weeks
    Differential Revision:  https://reviews.freebsd.org/D49444

 sys/net/if.c       | 26 +++++++++++++++++++++-----
 sys/netinet/in.c   |  2 ++
 sys/netinet6/in6.c |  2 ++
 3 files changed, 25 insertions(+), 5 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.