ipsec: extend vnet coverage in esp_input/output_cb
ClosedPublic
Actions

Authored by mjg on Feb 18 2022, 11:25 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Wed, Apr 15, 2:24 AM

	Unknown Object (File)
	Tue, Apr 14, 6:21 AM

	Unknown Object (File)
	Tue, Apr 7, 7:47 PM

	Unknown Object (File)
	Tue, Apr 7, 10:38 AM

	Unknown Object (File)
	Tue, Apr 7, 7:34 AM

	Unknown Object (File)
	Sat, Mar 28, 4:35 AM

	Unknown Object (File)
	Fri, Mar 27, 11:17 AM

	Unknown Object (File)
	Fri, Mar 27, 2:24 AM

Subscribers

Details

Reviewers

Commits

rG91c35dd76508: ipsec: extend vnet coverage in esp_input/output_cb

Summary

key_delsav used to conditionally dereference vnet, leading to panics as
it was getting unset too early.

While the particular condition was removed, it makes sense to handle all
operations of the sort with correct vnet set so change it.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

mjg created this revision.Feb 18 2022, 11:25 AM

Herald added subscribers: glebius, melifaro, imp. · View Herald TranscriptFeb 18 2022, 11:25 AM

mjg requested review of this revision.Feb 18 2022, 11:25 AM

ae accepted this revision.Feb 18 2022, 11:52 AM

This revision is now accepted and ready to land.Feb 18 2022, 11:52 AM

Closed by commit rG91c35dd76508: ipsec: extend vnet coverage in esp_input/output_cb (authored by mjg). · Explain WhyFeb 19 2022, 1:12 PM

This revision was automatically updated to reflect the committed changes.

mjg added a commit: rG91c35dd76508: ipsec: extend vnet coverage in esp_input/output_cb.

Revision Contents
Changeset List

Path

Size

sys/

netipsec/

xform_esp.c

4 lines

Diff 102969

View Options

ipsec: extend vnet coverage in esp_input/output_cbClosedPublicActions