From Bugzilla Helper: User-Agent: Mozilla/5.0 (compatible; Konqueror/3.4; Linux) KHTML/3.4.0 (like Gecko) Description of problem: ipv6_add_addr() calls addrconf_dst_alloc(). If that fails, then rt is set to an error not a pointer, and the epilogue at "out:" then tries to free what rt points to since it isn't NULL. Version-Release number of selected component (if applicable): kernel-2.6.9-11.38.EL How reproducible: Didn't try Steps to Reproduce: It just happened once. I don't know why, but I know exactly what the problem is: see description and patch. Actual Results: It oopsed. Expected Results: No oops. Additional info:
Created attachment 117238 [details] Fix IPv6 address addition error handling
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2006-0132.html