Subject: kern/4561: NetBSD crashes with certain sequence of 'route' commands.
To: None <firstname.lastname@example.org>
From: None <email@example.com>
Date: 11/21/1997 19:46:34
>Synopsis: NetBSD crashes with certain sequence of 'route' commands.
>Responsible: kern-bug-people (Kernel Bug People)
>Arrival-Date: Fri Nov 21 18:35:02 1997
>Originator: Eric Haszlakiewicz
i386 + alpha
System: NetBSD realms.isdn.uiuc.edu 1.3_ALPHA NetBSD 1.3_ALPHA (REALMS) #22: Thu Nov 20 04:02:23 CST 1997 firstname.lastname@example.org:/usr/src/sys/arch/i386/compile/REALMS i386
When a certain seqeunce of route commands is issued the NetBSD
kernel crashes because of what appears to be corrupted data in the
routing table. Not likely to be machine dependant.
ifconfig everything then:
# route add 127.0.0.0 127.0.0.2
add net 127.0.0.0: gateway 127.0.0.2
(this next line must change it to what it already is (or something close)
route change 127.0.0.0 127.0.30.16 still crashes. It appears that
the requirement necessary for the problem is that the routing code
references the routing table to see where the gateway goes. So
using "route add 127.0.0.0 <blah> works fine if blah is directly
# route change 127.0.0.0 127.0.0.2
change net 127.0.0.0: gateway 127.0.0.2
# route delete 127.0.0.0
Now it has a cow (or rather a slab of dead beef) when trying to get the len
from a bogus sockaddr * in rt_msg2(). I believe the problem happens during the
"route change" command, but I'm not sure yet.
...working on it...anyone see anything obvious?