On Fri, 10 May 2002, Jun-ichiro itojun Hagino wrote:

>
> Module Name:	syssrc
> Committed By:	itojun
> Date:		Fri May 10 05:49:23 UTC 2002
>
> Modified Files:
> 	syssrc/sys/netinet6: ipsec.c
>
> Log Message:
> disable ipsec policy caching on pcb, as it seems that there's some reference-
> counting mistake that causes panic - see PR 15953 and 13813.
>
> i am unable to find the real cause of problem, so it is a shortterm workaround,
> hopefully.

I looked into this at one point. One thing that would probably help is to
add a macro for increasing the reference count. That way we can easily
instrument checks on refrence adding in addition to reference releaseing.
Tests like make sure we aren't about to overflow or we aren't adding a
reference to something with 0 references.

Take care,

Bill