CVSROOT: /cvs Module name: src Changes by: [email protected] 2022/05/09 13:33:46
Modified files:
sys/netinet : ip_divert.c
sys/netinet6 : ip6_divert.c
Log message:
Protect sbappendaddr() in divert_packet() with kernel lock. With
divert-packet rules pf calls directly from IP layer to protocol
layer. As the former has only shared net lock, additional protection
against parallel access is needed. Kernel lock is a temporary
workaround until the socket layer is MP safe.
discussed with kettenis@ mvs@
