Page MenuHomeFreeBSD
Differential D33240

pfsync: NULL check sc before using it
ClosedPublic
Actions

Authored by kp on Dec 3 2021, 9:48 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Dec 11, 6:29 PM
Unknown Object (File)
Fri, Dec 5, 5:55 AM
Unknown Object (File)
Thu, Dec 4, 2:27 PM
Unknown Object (File)
Tue, Dec 2, 4:57 AM
Unknown Object (File)
Fri, Nov 28, 8:24 AM
Unknown Object (File)
Sat, Nov 22, 1:20 AM
Unknown Object (File)
Fri, Nov 21, 2:01 AM
Unknown Object (File)
Mon, Nov 17, 10:32 AM
View All 100 Files
Subscribers
farrokhi
glebius
imp
melifaro

Details

Reviewers
None
Group Reviewers
network
pfsense
Commits
rGbbbe18b31795: pfsync: NULL check sc before using it
rG9a663b668c05: pfsync: NULL check sc before using it
rG27bd812c5c92: pfsync: NULL check sc before using it
Summary

In pfsync_defer() we must wait to lock sc until we've ensured it's not
NULL.

MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 43115
Build 40003: arc lint + arc unit

Event Timeline

kp created this revision.Dec 3 2021, 9:48 AM
Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptDec 3 2021, 9:48 AM
kp requested review of this revision.Dec 3 2021, 9:48 AM
Harbormaster completed remote builds in B43115: Diff 99387.Dec 3 2021, 9:48 AM
kp added a child revision: D33241: pfsync: check IFF_DRV_RUNNING in the correct field.Dec 3 2021, 9:48 AM
glebius added a comment.Dec 3 2021, 4:47 PM

If it go NULL spontaneously, it can go NULL right after this check before PFSYNC_LOCK(). The patch reduces panic chances significantly, of course.

kp added a comment.Dec 3 2021, 4:56 PM
In D33240#751540, @glebius wrote:

If it go NULL spontaneously, it can go NULL right after this check before PFSYNC_LOCK(). The patch reduces panic chances significantly, of course.

Not so much spontaneously, but it can happen if a user decides to ifconfig pfsync0 destroy.

This revision was not accepted when it landed; it landed in state Needs Review.Dec 6 2021, 12:25 PM
Closed by commit rG27bd812c5c92: pfsync: NULL check sc before using it (authored by kp). · Explain Why
This revision was automatically updated to reflect the committed changes.
kp added a commit: rG27bd812c5c92: pfsync: NULL check sc before using it.
kp added a commit: rG9a663b668c05: pfsync: NULL check sc before using it.Dec 13 2021, 1:51 PM
kp added a commit: rGbbbe18b31795: pfsync: NULL check sc before using it.

Revision Contents
Changeset List

PathSize
sys/
netpfil/
pf/
5 lines

Diff 99387

View Options

sys/netpfil/pf/if_pfsync.c

Loading...