lang: en

FreeBSD lock order reversal (LOR) #163

ID 163
state patched
responsible gnn
reported first 2005-09-21
reported last 2007-08-06
do you know more? submit update by email
LOR
lock order reversal
  1st 0xc295a090 inp (divinp) @ sys/netinet/ip_divert.c:327
  2nd 0xc28d9150 ipsec request (ipsec request) @ sys/netipsec/ipsec_output.c:354
		
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c0763e30,c0763e58,c072b204) at kdb_backtrace+0x29
witness_checkorder(c28d9150,9,c06fc8ea,162) at witness_checkorder+0x564
_mtx_lock_flags(c28d9150,0,c06fc8ea,162,0) at _mtx_lock_flags+0x5b
ipsec4_process_packet(c28f9800,c28d9100,22,0,c26c8e00) at ipsec4_process_packet+0x45
ip_output(c28f9800,0,e740fb28,22,0) at ip_output+0x74f
div_output(c294b858,c28f9800,c23bd440,0,e740fc08) at div_output+0x185
div_send(c294b858,0,c28f9800,c23bd440,0) at div_send+0x3f
sosend(c294b858,c23bd440,e740fc3c,c28f9800,0) at sosend+0x5e3
kern_sendit(c2711d80,3,e740fcbc,0,0) at kern_sendit+0x104
sendit(c2711d80,3,e740fcbc,0,bfbdec04) at sendit+0x163
sendto(c2711d80,e740fd04,6,0,296) at sendto+0x4d
syscall(3b,3b,3b,2,64) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (133, FreeBSD ELF32, sendto), eip = 0x280c5d97, esp = 0xbfbdeb0c, ebp = 0xbfbeebb8 ---
		
comments/references