On Sat, Jul 13, 2013 at 02:18:26PM +0300, Mikolaj Golub wrote:

> I wonder if it fails on current too? It looks this code is not there
> any more. I will try.

Yes. It crashes on current too. In pfattach(). Also, loading ipfw and
ipfw_nat causes panics in ipfw_init() and ipfw_nat_init(). Although
this can be easily bandaged with CURVNET_SET(vnet0), it rather reveals
problems with these modules.

E.g. currently in ipfw_nat_init() we lock virtualized layer3_chain in
vnet0 context, I think, to restrict the access to ipfw_nat_*_ptr
variables during modification. But the access is not protected from
another vnets, which might already exist at the moment when ipfw_nat
is loaded.

-- 
Mikolaj Golub
_______________________________________________
svn-src-head@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

Reply via email to