OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
CVS: cvs.openbsd.org: src

From: Henning Brauer (henningcvs.openbsd.org)
Date: Thu Jul 03 2008 - 19:56:49 CDT


CVSROOT: /cvs
Module name: src
Changes by: henningcvs.openbsd.org 2008/07/03 18:56:49

Modified files:
        sys/net : pf.c

Log message:
in pf_state_key_attach(), when we find that there already is a state key
that we can attach the state to, make sure to not overwrite the state key
pointer in the state that was just set to the existing state key with the
state key that was supplied with the state and just free'd (well, pool_put'd).
by the time we clean up the state and try to follow it to RB_REMOVE etc
we'd follow that garbage pointer to either an unrelated state key or the old
state key still sitting unused in the pool.
should fix the RB_REMOVE panics some people have been seeing.
"clearly ok, please commit" ryan