CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2021/12/16 08:38:03
Modified files:
sys/netinet : ip_spd.c
Log message:
Fix a tiny race in tdb_delete() between TDBF_DELETED, tdb_unlink()
and tdb_cleanspd(). gettdb...() can return a TDB before tdb_unlink().
Then ipsp_spd_lookup() could add it to tdb_policy_head after
tdb_cleanspd(). There it would stay until it hits the kassert in
tdb_free().
OK tobhe@
