vRouter Extension crashes while scanning fragments table
Bug #1793299 reported by
Dariusz Sosnowski
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
Trunk |
Fix Committed
|
Undecided
|
Dariusz Sosnowski | |||
OpenContrail |
Fix Committed
|
Undecided
|
Unassigned |
Bug Description
This bug affects Contrail Windows vRouter Extension.
Disabling vRouter Extension on Windows can trigger a bluescreen in fragment assembly module.
vr_delete_timer cancels a timer without waiting for a scheduled
callback. This caused a data race (letter in parenthesis is thread ID):
- (A) disable extension operation starts;
- (A) VrAssemblerExit is called;
- (B) scheduled callback starts executing;
- (A) vr_delete_timer called in vr_assembler_
and returns immediately;
- (A) VrAssemblerExit frees VrAssemblerTable;
- (B) memory pointed to by VrAssemblerTable is accessed and extension
bug checks;
Changed in opencontrail: | |
status: | New → Fix Committed |
To post a comment you must log in.
Review in progress for https:/ /review. opencontrail. org/46309
Submitter: Dariusz Sosnowski (<email address hidden>)