From nobody@FreeBSD.org  Sun Nov 25 21:47:09 2007
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 58CF216A420
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 25 Nov 2007 21:47:09 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 2D7CF13C478
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 25 Nov 2007 21:47:09 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id lAPLl6QY063184
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 25 Nov 2007 21:47:06 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id lAPLl5dv063183;
	Sun, 25 Nov 2007 21:47:05 GMT
	(envelope-from nobody)
Message-Id: <200711252147.lAPLl5dv063183@www.freebsd.org>
Date: Sun, 25 Nov 2007 21:47:05 GMT
From: Andriy Syrovenko <andriys@gmail.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: IPFilter: kernel panics when calling SIOCAUTHW ioctl
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         118251
>Category:       kern
>Synopsis:       [ipfilter] kernel panics when calling SIOCAUTHW ioctl
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    darrenr
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Nov 25 21:50:01 UTC 2007
>Closed-Date:    Mon Dec 17 04:29:21 UTC 2007
>Last-Modified:  Mon Dec 17 04:29:21 UTC 2007
>Originator:     Andriy Syrovenko
>Release:        6.3-PRERELEASE
>Organization:
>Environment:
>Description:
Kernel panics immediately when calling the SIOCAUTHW ioctl for /dev/ipauth device. As far as I managed to understand in happens because the fr_authwait() functions tries to release the ipf_global lock which is not actually held.

The problem has been introduced by the post-4.1.28 fixes.

>How-To-Repeat:
Open the /dev/ipauth device and call SIOCAUTHW ioctl.
>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->darrenr 
Responsible-Changed-By: remko 
Responsible-Changed-When: Sun Nov 25 21:51:36 UTC 2007 
Responsible-Changed-Why:  
reassign to maintainer 

http://www.freebsd.org/cgi/query-pr.cgi?pr=118251 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/118251: commit references a PR
Date: Mon, 26 Nov 2007 08:18:26 +0000 (UTC)

 darrenr     2007-11-26 08:18:19 UTC
 
   FreeBSD src repository
 
   Modified files:
     sys/contrib/ipfilter/netinet fil.c ip_auth.c ip_fil_freebsd.c 
   Log:
   Fix 3 issues relating to the use of "auth" rules in IPFilter, from sourceforge:
   1837014 Kernel panics after authentication of an outgoing packet
   1836992 Potential bugs in packet auth code (w/patches)
   1836967 Kernel panic when using auth rule with keep state
   and another reported only to FreeBSD by Andiry (see PR)
   
   PR:             kern/118251
   Submitted by:   Andriy Syrovenko <andriys@gmail.com>
   Reviewed by:    darrenr
   MFC after:      5 days
   
   Revision  Changes    Path
   1.55      +4 -4      src/sys/contrib/ipfilter/netinet/fil.c
   1.47      +5 -14     src/sys/contrib/ipfilter/netinet/ip_auth.c
   1.9       +2 -0      src/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
State-Changed-From-To: open->feedback 
State-Changed-By: darrenr 
State-Changed-When: Mon Nov 26 08:23:55 UTC 2007 
State-Changed-Why:  
patch applied. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=118251 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/118251: commit references a PR
Date: Sat,  1 Dec 2007 00:52:54 +0000 (UTC)

 darrenr     2007-12-01 00:52:48 UTC
 
   FreeBSD src repository
 
   Modified files:        (Branch: RELENG_6)
     sys/contrib/ipfilter/netinet fil.c ip_auth.c ip_fil_freebsd.c 
   Log:
   MFC:
   Fix 3 issues relating to the use of "auth" rules in IPFilter, from sourceforge:
   1837014 Kernel panics after authentication of an outgoing packet
   1836992 Potential bugs in packet auth code (w/patches)
   1836967 Kernel panic when using auth rule with keep state
   and another reported only to FreeBSD by Andiry (see PR)
   
   PR:             kern/118251
   Submitted by:   Andriy Syrovenko <andriys@gmail.com>
   Reviewed by:    darrenr
   Approved by:    re
   
   Revision     Changes    Path
   1.46.2.3     +6 -6      src/sys/contrib/ipfilter/netinet/fil.c
   1.40.2.3     +7 -16     src/sys/contrib/ipfilter/netinet/ip_auth.c
   1.1.1.1.2.5  +3 -1      src/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/118251: commit references a PR
Date: Sat,  1 Dec 2007 00:53:20 +0000 (UTC)

 darrenr     2007-12-01 00:53:16 UTC
 
   FreeBSD src repository
 
   Modified files:        (Branch: RELENG_6_3)
     sys/contrib/ipfilter/netinet fil.c ip_auth.c ip_fil_freebsd.c 
   Log:
   MFC:
   Fix 3 issues relating to the use of "auth" rules in IPFilter, from sourceforge:
   1837014 Kernel panics after authentication of an outgoing packet
   1836992 Potential bugs in packet auth code (w/patches)
   1836967 Kernel panic when using auth rule with keep state
   and another reported only to FreeBSD by Andiry (see PR)
   
   PR:             kern/118251
   Submitted by:   Andriy Syrovenko <andriys@gmail.com>
   Reviewed by:    darrenr
   Approved by:    re
   
   Revision         Changes    Path
   1.46.2.2.2.1     +6 -6      src/sys/contrib/ipfilter/netinet/fil.c
   1.40.2.2.2.1     +7 -16     src/sys/contrib/ipfilter/netinet/ip_auth.c
   1.1.1.1.2.4.2.1  +3 -1      src/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/118251: commit references a PR
Date: Sat,  1 Dec 2007 00:53:46 +0000 (UTC)

 darrenr     2007-12-01 00:53:41 UTC
 
   FreeBSD src repository
 
   Modified files:        (Branch: RELENG_7)
     sys/contrib/ipfilter/netinet fil.c ip_auth.c ip_fil_freebsd.c 
   Log:
   MFC:
   Fix 3 issues relating to the use of "auth" rules in IPFilter, from sourceforge:
   1837014 Kernel panics after authentication of an outgoing packet
   1836992 Potential bugs in packet auth code (w/patches)
   1836967 Kernel panic when using auth rule with keep state
   and another reported only to FreeBSD by Andiry (see PR)
   
   PR:             kern/118251
   Submitted by:   Andriy Syrovenko <andriys@gmail.com>
   Reviewed by:    darrenr
   Approved by:    re
   
   Revision  Changes    Path
   1.52.2.2  +6 -6      src/sys/contrib/ipfilter/netinet/fil.c
   1.44.2.2  +7 -16     src/sys/contrib/ipfilter/netinet/ip_auth.c
   1.6.2.2   +3 -1      src/sys/contrib/ipfilter/netinet/ip_fil_freebsd.c
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
State-Changed-From-To: feedback->closed 
State-Changed-By: linimon 
State-Changed-When: Mon Dec 17 04:28:32 UTC 2007 
State-Changed-Why:  
Patched and merged to 6.3 and 7.0. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=118251 
>Unformatted:
