Bug 215372

Summary:	"ndp -P"/SIOCSPFXFLUSH_IN6 ioctl hits KASSERT in nd6_prefix_unlink()
Product:	Base System	Reporter:	Jan Kokemüller <jan.kokemueller>
Component:	kern	Assignee:	Mark Johnston <markj>
Status:	Closed FIXED
Severity:	Affects Some People	CC:	ae, markj
Priority:	---
Version:	CURRENT
Hardware:	Any
OS:	Any

Description Jan Kokemüller 2016-12-18 09:51:44 UTC

When I run "ndp -P" on CURRENT r309302 with assertions on, the KASSERT in nd6_prefix_unlink() is hit:

     KASSERT(pr->ndpr_addrcnt == 0, ("prefix %p has referencing addresses", pr));

I guess the changes in base r306829 are responsible.

Comment 1 commit-hook freebsd_committer

2016-12-19 19:21:36 UTC

A commit references this bug:

Author: markj
Date: Mon Dec 19 19:21:28 UTC 2016
New revision: 310286
URL: https://svnweb.freebsd.org/changeset/base/310286

Log:
  Remove a bogus KASSERT from nd6_prefix_unlink().

  The caller may unlink a prefix before purging referencing addresses. An
  identical assertion in nd6_prefix_del() verifies that the addresses are
  purged before the prefix is freed.

  PR:		215372
  X-MFC With:	r306829

Changes:
  head/sys/netinet6/nd6_rtr.c

Comment 2 Mark Johnston freebsd_committer

2016-12-19 19:22:29 UTC

Thanks for the report.