Re: Double free in trunk(4)

2015-06-12 Thread Dariusz Swiderski
> On 10 cze 2015, at 17:55, Martin Pieuchot wrote: > > During clone/destroy stress tests on pseudo-interfaces I found a double > free easily reproducible with dhclient(8) running on top of a trunk(4). > > The problem comes from trunk_ether_delmulti() which is almost identical > to carp's version

Double free in trunk(4)

2015-06-10 Thread Martin Pieuchot
During clone/destroy stress tests on pseudo-interfaces I found a double free easily reproducible with dhclient(8) running on top of a trunk(4). The problem comes from trunk_ether_delmulti() which is almost identical to carp's version except that it always free "mc". So when you do "# ifconfig tru