Re: kern/49506: panic in bpf

[Alexander Nasonov <alnsn%yandex.ru@localhost>]

The following reply was made to PR kern/49506; it has been noted by GNATS.

From: Alexander Nasonov <alnsn%yandex.ru@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: kern-bug-people%netbsd.org@localhost, gnats-admin%netbsd.org@localhost,
	netbsd-bugs%netbsd.org@localhost
Subject: Re: kern/49506: panic in bpf
Date: Fri, 26 Dec 2014 10:43:27 +0000

 n54%gmx.com@localhost wrote:
 > If I remember correctly it was "bc" and it was triggered in one of the following cases:
 > case BPF_MISC|BPF_COP:
 > #ifdef _KERNEL
 > if (pc->k < bc->nfuncs) {
 > const bpf_copfunc_t fn = bc->copfuncs[pc->k];
 > A = fn(bc, args, A);
 > continue;
 > }
 > #endif
 > return 0;
 > case BPF_MISC|BPF_COPX:
 > #ifdef _KERNEL
 > if (X < bc->nfuncs) {
 > const bpf_copfunc_t fn = bc->copfuncs[X];
 > A = fn(bc, args, A);
 > continue;
 > }
 > #endif
 
 I wonder which filter program triggered it and whether it bypassed a
 validation step somehow. When bc is NULL, filter programs with COP/COPX
 shouldn't pass bpf_validate_ext().
 
 Alex