Re: Witness This

[Daniel C. Sobral]

Robert Watson wrote:
Ok, I've committed it.  Saw your other panic message, hope to look more
closely today.
BTW, you might consider running with the mac_test module, as it's intended
to help diagnose label problems through additional assertions.
Oh. That was not clear to me. I thought it was a module you used for 
tests, not something which _helped_ debug other mac policies.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
[EMAIL PROTECTED]      Network Associates Laboratories
On Tue, 25 Feb 2003, Daniel C. Sobral wrote:


No bugs so far with this.

Robert Watson wrote:

Revised patch without typo attached.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
[EMAIL PROTECTED]      Network Associates Laboratories
Index: tcp_subr.c
===================================================================
RCS file: /data/fbsd-cvs/ncvs/src/sys/netinet/tcp_subr.c,v
retrieving revision 1.155
diff -u -r1.155 tcp_subr.c
--- tcp_subr.c  21 Feb 2003 23:17:12 -0000      1.155
+++ tcp_subr.c  22 Feb 2003 02:44:42 -0000
@@ -484,7 +484,7 @@
        m->m_pkthdr.len = tlen;
        m->m_pkthdr.rcvif = (struct ifnet *) 0;
#ifdef MAC
-       if (tp != NULL) {
+       if (tp != NULL && tp->t_inpcb != NULL) {
                /*
                 * Packet is associated with a socket, so allow the
                 * label of the response to reflect the socket label.


--
Daniel C. Sobral                   (8-DCS)
Gerencia de Operacoes
Divisao de Comunicacao de Dados
Coordenacao de Seguranca
TCO
Fones: 55-61-313-7654/Cel: 55-61-9618-0904
E-mail: [EMAIL PROTECTED]
        [EMAIL PROTECTED]
        [EMAIL PROTECTED]
Outros:
        [EMAIL PROTECTED]
        [EMAIL PROTECTED]
        [EMAIL PROTECTED]
I disagree with what you say, but will defend
to the death your right to tell such LIES!



--
Daniel C. Sobral                   (8-DCS)
Gerencia de Operacoes
Divisao de Comunicacao de Dados
Coordenacao de Seguranca
TCO
Fones: 55-61-313-7654/Cel: 55-61-9618-0904
E-mail: [EMAIL PROTECTED]
        [EMAIL PROTECTED]
        [EMAIL PROTECTED]
Outros:
        [EMAIL PROTECTED]
        [EMAIL PROTECTED]
        [EMAIL PROTECTED]
Don't hate yourself in the morning -- sleep till noon.

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message