https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258601
--- Comment #8 from Kristof Provost <[email protected]> --- (In reply to rz-rpi03 from comment #7) Ah, thanks. That's actually somewhat useful. copyinout() gets called (as copyout()) in only one place in the function, and I suspect I know what's going on as well. I shouldn't be running copyout() while holding the pf rules lock. Happily we've already built the nvlist at that point, and it's safe to release it earlier. It'll just take a minor bit of rearranging the code. I think I can fix it tomorrow. -- You are receiving this mail because: You are the assignee for the bug.
