Re: PROBLEM: 2.6.11-rc2 hangs on bridge shutdown (br0)

From: Herbert Xu (herbert_at_gondor.apana.org.au)
Date: 02/06/05

  • Next message: Pierre Ossman: "Re: Strange device init"
    Date:	Sun, 6 Feb 2005 22:41:45 +1100
    To: "David S. Miller" <davem@davemloft.net>
    
    

    On Sat, Feb 05, 2005 at 09:45:59PM +1100, herbert wrote:
    >
    > Although I still think this is a bug, I'm now starting to suspect
    > that there is another bug around as well.
    >
    > There is probably an ifp leak which in turn leads to a split dst
    > leak that allows the first bug to make its mark.

    Found it. This is what happens:

    lo goes down =>
            rt6_ifdown =>
                    eth0's local address route gets deleted

    eth0 goes down =>
            __ipv6_ifa_notify =>
                    ip6_del_rt fails so we fall through to the
                    dst_free path. At this point the refcount
                    taken by __ipv6_ifa_notify is leaked.

    Cheers,

    -- 
    Visit Openswan at http://www.openswan.org/
    Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
    Home Page: http://gondor.apana.org.au/~herbert/
    PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at  http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at  http://www.tux.org/lkml/
    

  • Next message: Pierre Ossman: "Re: Strange device init"

    Relevant Pages

    • Re: AGP problem SiS 746FX Linux 2.6.5-rc3
      ... the Empire squashes the Federation like a bug. ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: 2.6.9bk6 msdos fs OOPS
      ... >This bug is triggered by race condition. ... Apparently my lashup doesn't trigger it. ... Copyright 2004 by Maurice Eugene Heskett, ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: [patch 0/3] j_state_lock, j_list_lock, remove-bitlocks
      ... BUG: Unable to handle kernel NULL pointer dereference at virtual address ... TAS_BUFFER_FNS(RevokeValid, revokevalid) ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: Linux 2.6.11.2
      ... Matt Mackall wrote: ... > I suspect you might find that tedious, especially if only the last one ... > addressed a bug that affected you. ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: BUG at mm/memory.c:1501 in 2.6.0-test5
      ... >Any module running inside the kernel can destroy anything. ... A simple bug in any ... You should send your report to the vendor. ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)