[Bug 288274] pf_test() can use an mbuf freed by pf_route()

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288274

Kristof Provost <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|[email protected]              |[email protected]
                 CC|                            |[email protected]

--- Comment #1 from Kristof Provost <[email protected]> ---
Thanks for the report.

I believe the issue is that pf_route() may drop the packet, but we still have a
deferred SCTP multihome job in the queue, which references the packet.
I think the correct fix here is to have pf_route() return an error, and to not
attempt the SCTP multihome job on that error.
The pf_sctp_multihome_delayed() already drops SCTP multihome jobs if we didn't
pass the packet, but because pf_route() can't return an error we don't know
that we should.

-- 
You are receiving this mail because:
You are the assignee for the bug.