CVSROOT: /cvs
Module name: src
Changes by: bl...@cvs.openbsd.org 2022/03/22 12:17:30
Modified files:
sys/netinet : raw_ip.c
Log message:
For raw IP packets rip_input() traverses the loop of all PCBs. From
there it calls sbappendaddr() while holding the raw table mutex.
This ends in sorwakeup() where we finally grab the kernel lock while
holding a mutex. Witness detects this misuse.
Use the same solution as for PCB notify. Collect the affected PCBs
in a temporary list. The list is protected by exclusive net lock.
syzbot+ebe3f03a472fecf5e...@syzkaller.appspotmail.com
OK claudio@
