]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
When detaching a network interface drain the workqueue freeing the inm's
authorhselasky <hselasky@FreeBSD.org>
Thu, 24 Jan 2019 08:25:02 +0000 (08:25 +0000)
committerhselasky <hselasky@FreeBSD.org>
Thu, 24 Jan 2019 08:25:02 +0000 (08:25 +0000)
commitb9fedbd75bbb6bbc04e73515d21b1ad653b69e01
tree09f57a740e31a030dc0d808f98e45ff75a40d7f1
parentc9ba3bd6b366b669e4b65ba7e493e7941bc13028
When detaching a network interface drain the workqueue freeing the inm's
because the destructor will access the if_ioctl() callback in the ifnet
pointer which is about to be freed. This prevents use-after-free.

PR: 233535
Differential Revision: https://reviews.freebsd.org/D18887
Reviewed by: bz (net)
Tested by: ae
MFC after: 1 week
Sponsored by: Mellanox Technologies
sys/netinet6/in6_ifattach.c
sys/netinet6/in6_mcast.c
sys/netinet6/in6_var.h