freebsd-dev/sys/netpfil
Kristof Provost 3e603d1ffa pf: Fix panic on vnet jail shutdown with synproxy
When shutting down a vnet jail pf_shutdown() clears the remaining states, which
through pf_clear_states() calls pf_unlink_state().
For synproxy states pf_unlink_state() will send a TCP RST, which eventually
tries to schedule the pf swi in pf_send(). This means we can't remove the
software interrupt until after pf_shutdown().

MFC after:	1 week
2018-07-14 09:11:32 +00:00
..
ipfw Use correct size when we are allocating array for skipto index. 2018-07-12 11:38:18 +00:00
pf pf: Fix panic on vnet jail shutdown with synproxy 2018-07-14 09:11:32 +00:00