CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]    2009/02/26 00:29:47

Modified files:
        sys/net        : if_pfsync.c 

Log message:
bulk updates are sent from a timeout which walks over the state tree and
modifies the pfsync state queues, however, it didnt prevent interrupts from
whacking the same structures.

this diff makes the bulk update code take splsoftnet() to prevent the
panics ive been suffering all day when a firewall peer was booted.

ok deraadt@

Reply via email to