Detach the interface first, do vlan_unconfig() then.

Previously, another thread could get a pointer to the
interface by scanning the system-wide list and sleep
on the global vlan mutex held by vlan_unconfig().
The interface was gone by the time the other thread
woke up.

In order to be able to call vlan_unconfig() on a detached
interface, remove the purely cosmetic bzero'ing of IF_LLADDR
from the function because a detached interface has no addresses.

Noticed by:	a stress-testing script by maxim
Reviewed by:	glebius
This commit is contained in:
Yaroslav Tykhiy 2006-06-29 07:52:30 +00:00
parent 114c608c71
commit 249f4297db
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=160020

View file

@ -703,8 +703,8 @@ vlan_clone_create(struct if_clone *ifc, char *name, size_t len)
* out all the way, otherwise userland could get
* confused. Thus, we destroy the interface.
*/
vlan_unconfig(ifp);
ether_ifdetach(ifp);
vlan_unconfig(ifp);
if_free_type(ifp, IFT_ETHER);
free(ifv, M_VLAN);
@ -725,13 +725,10 @@ vlan_clone_destroy(struct if_clone *ifc, struct ifnet *ifp)
struct ifvlan *ifv = ifp->if_softc;
int unit = ifp->if_dunit;
vlan_unconfig(ifp);
ether_ifdetach(ifp);
ether_ifdetach(ifp); /* first, remove it from system-wide lists */
vlan_unconfig(ifp); /* now it can be unconfigured and freed */
if_free_type(ifp, IFT_ETHER);
free(ifv, M_VLAN);
ifc_free_unit(ifc, unit);
return (0);
@ -1147,9 +1144,6 @@ vlan_unconfig_locked(struct ifnet *ifp)
ifp->if_link_state = LINK_STATE_UNKNOWN;
ifp->if_drv_flags &= ~IFF_DRV_RUNNING;
/* Clear our MAC address. */
bzero(IF_LLADDR(ifp), ETHER_ADDR_LEN);
return (0);
}