DF-2601 / run.log
NGSRC[mode=4]: ifq_maxlen=2048; enqueued 3000 mbufs; ifq_len now 3000 >> 2048 NGSRC: RESULT=UNBOUNDED QUEUE: no IF_QFULL check; kernel mbuf zone drainable to exhaustion by the connected node NGSRC[mode=5]: lo0 ifp=0xfffff8008e0ead40 NGSRC: live-lo0 read ifsq=0xfffff800899b0200 (works until the interface goes away)NGSRC[mode=6]: lo0 ifp=0xfffff8008e0ead40 NGSRC: code holds no ref: after ifconfig lo0 destroy, struct ifnet is kfree()d; sc->output_ifp dangles and ng_source_intr() reads output_ifp->if_snd (freed memory) NGSRC: post-free read of output_ifp->if_snd -> ifsq=0 (freed memory dereferenced)