Subject: kern/4561: NetBSD crashes with certain sequence of 'route' commands.
To: None <>
From: None <>
List: netbsd-bugs
Date: 11/21/1997 19:46:34
>Number:         4561
>Category:       kern
>Synopsis:       NetBSD crashes with certain sequence of 'route' commands.
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Nov 21 18:35:02 1997
>Originator:     Eric Haszlakiewicz
>Release:        971120
	i386 + alpha
System: NetBSD 1.3_ALPHA NetBSD 1.3_ALPHA (REALMS) #22: Thu Nov 20 04:02:23 CST 1997 i386

	When a certain seqeunce of route commands is issued the NetBSD
kernel crashes because of what appears to be corrupted data in the 
routing table.  Not likely to be machine dependant.
	ifconfig everything then:
		# route add
		add net gateway
(this next line must change it to what it already is (or something close)
	route change still crashes.  It appears that
	the requirement necessary for the problem is that the routing code
	references the routing table to see where the gateway goes.  So
	using "route add <blah> works fine if blah is directly
		# route change
		change net gateway
		# route delete
Now it has a cow (or rather a slab of dead beef) when trying to get the len
from a bogus sockaddr * in rt_msg2().  I believe the problem happens during the
"route change" command, but I'm not sure yet.
	...working on it...anyone see anything obvious?