From 53362250832e2d2a5b7c7a93d0a43e83b585be01 Mon Sep 17 00:00:00 2001
From: rwatson <rwatson@FreeBSD.org>
Date: Sun, 9 Jan 2005 05:08:47 +0000
Subject: [PATCH] Hold the IPX PCB mutex around calls to ipx_input() in the IPX
 input path.

MFC after:	3 weeks
---
 sys/netipx/ipx_input.c | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/sys/netipx/ipx_input.c b/sys/netipx/ipx_input.c
index 92d4e3899c0b..d0d01a4208be 100644
--- a/sys/netipx/ipx_input.c
+++ b/sys/netipx/ipx_input.c
@@ -165,8 +165,11 @@ ipxintr(struct mbuf *m)
 	IPX_LIST_LOCK();
 	LIST_FOREACH(ipxp, &ipxrawpcb_list, ipxp_list) {
 		struct mbuf *m1 = m_copy(m, 0, (int)M_COPYALL);
-		if (m1 != NULL)
+		if (m1 != NULL) {
+			IPX_LOCK(ipxp);
 			ipx_input(m1, ipxp);
+			IPX_UNLOCK(ipxp);
+		}
 	}
 	IPX_LIST_UNLOCK();
 
@@ -278,7 +281,9 @@ ipxintr(struct mbuf *m)
 				IPX_LIST_UNLOCK();
 				return;
 			}
+		IPX_LOCK(ipxp);
 		ipx_input(m, ipxp);
+		IPX_UNLOCK(ipxp);
 	} else
 		m_freem(m);
 	IPX_LIST_UNLOCK();
@@ -507,7 +512,9 @@ struct ifnet *ifp;
 				}
 			    }
 			ipx->ipx_len = ntohl(m0->m_pkthdr.len);
+			IPX_LOCK(ipxp);
 			ipx_input(m0, ipxp);
+			IPX_UNLOCK(ipxp);
 		}
 	}
 	IPX_LIST_UNLOCK();