netdev
[Top] [All Lists]

Re: PROBLEM: 2.6.11-rc2 hangs on bridge shutdown (br0)

To: "David S. Miller" <davem@xxxxxxxxxxxxx>
Subject: Re: PROBLEM: 2.6.11-rc2 hangs on bridge shutdown (br0)
From: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
Date: Sun, 6 Feb 2005 22:41:45 +1100
Cc: mirko.parthey@xxxxxxxxxxxxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, netdev@xxxxxxxxxxx, yoshfuji@xxxxxxxxxxxxxx, shemminger@xxxxxxxx
In-reply-to: <20050205104559.GA30981@xxxxxxxxxxxxxxxxxxx>
References: <20050131162201.GA1000@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> <20050205052407.GA17266@xxxxxxxxxxxxxxxxxxx> <20050204213813.4bd642ad.davem@xxxxxxxxxxxxx> <20050205061110.GA18275@xxxxxxxxxxxxxxxxxxx> <20050204221344.247548cb.davem@xxxxxxxxxxxxx> <20050205064643.GA29758@xxxxxxxxxxxxxxxxxxx> <20050205104559.GA30981@xxxxxxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.6+20040722i
On Sat, Feb 05, 2005 at 09:45:59PM +1100, herbert wrote:
> 
> Although I still think this is a bug, I'm now starting to suspect
> that there is another bug around as well.
> 
> There is probably an ifp leak which in turn leads to a split dst
> leak that allows the first bug to make its mark.

Found it.  This is what happens:

lo goes down =>
        rt6_ifdown =>
                eth0's local address route gets deleted

eth0 goes down =>
        __ipv6_ifa_notify =>
                ip6_del_rt fails so we fall through to the
                dst_free path.  At this point the refcount
                taken by __ipv6_ifa_notify is leaked.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

<Prev in Thread] Current Thread [Next in Thread>