diff --git a/en/releases/6.0R/todo.sgml b/en/releases/6.0R/todo.sgml index 59a226638d..ef1ca6f654 100644 --- a/en/releases/6.0R/todo.sgml +++ b/en/releases/6.0R/todo.sgml @@ -1,7 +1,7 @@ - + %includes; %developers; @@ -100,6 +100,22 @@ Found by stress tests at http://www.holm.cc/stress/log/cons138.html. + + panic on multicast socket close after interface removal + &status.wip; + &a.rwatson; + Due to the addition of multicast locking, a long-present memory + corruption bug now generates an immediate panic if an interface is + removed while a multicast group is in use on the interface. This + can manifest if running routed and using vlans. A regression test + has now been committed as msocket_ifnet_remove. A short-term fix + will be to GC references to the interface in the IPv4/IPv6 + multicast socket options hung off of the inpcb; a long term solution + will require determining the correct application semantics for + interface removal as relates to multicast sockets. This problem is + described in detail in PR kern/77665. + +

Required features for 6.0-RELEASE