Patch-ID# 100304-02
Keywords: rtfree(), window, due, bug, panic, rtfree 
Synopsis: SunOS 4.1.1: panic due to window in rtfree()
Date: May-28-91 
 
SunOS release: 4.1.1  
 
Topic: routing kernel patch 
 
BugId's fixed with this patch: 1057878 

Architectures for which this patch is available: sun4, sun4c, sun3x

Patches which may conflict with this patch: 100149 100152

Obsoleted by: 

Problem Description: 
There is a window condition in the kernel subroutine "rtfree()"
and the kernel macro "RTFREE()" which can result in panicing
the system.  The window allows the "rt_refcnt" field in a
routing entry (struct rtentry) to be corrupted.  This later
leads to the possiblity of deleting a route entry that is
still in use, which in turn can cause routines such as
kudp_fastsend() to try to use invalid pointers.

23-Sep-91: -02
-------------------------
Added objects for sun3x, no source code change.


INSTALL: 
             Please Refer to the System and Networking Administration Manual
             section on building and installing a custom kernel.

	
AS ROOT:
--------
mv /sys/`arch -k`/OBJ/in_pcb.o /sys/`arch -k`/OBJ/in_pcb.o.FCS
mv /sys/`arch -k`/OBJ/ip_input.o /sys/`arch -k`/OBJ/ip_input.o.FCS
mv /sys/`arch -k`/OBJ/ip_output.o /sys/`arch -k`/OBJ/ip_output.o.FCS
mv /sys/`arch -k`/OBJ/kudp_fastsend.o /sys/`arch -k/OBJ/kudp_fastsend.o.FCS
mv /sys/`arch -k`/OBJ/route.o /sys/`arch -k/OBJ/route.o.FCS
mv /usr/include/net/route.h /usr/include/net/route.h.FCS

cp `arch -k`/in_pcb.o	/sys/`arch -k`/OBJ/in_pcb.o
cp `arch -k`/ip_input.o	/sys/`arch -k`/OBJ/ip_input.o
cp `arch -k`/ip_output.o /sys/`arch -k`/OBJ/ip_output.o
cp `arch -k`/kudp_fastsend.o /sys/`arch -k`/OBJ/kudp_fastsend.o
cp `arch -k`/route.o /sys/`arch -k`/OBJ/route.o
cp `arch -k`/route.h /usr/include/net/route.h

Rebuild a new kernel and boot system with this kernel.
Make sure to save old kernel in case there are problems with the
new kernel.