>Number:         11822
>Category:       kern
>Synopsis:       NetBSD crashes while deleting the entry in routing table
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Dec 27 03:15:01 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     Rajnish Madan
>Release:        1.4.1
>Organization:
TCS
>Environment:
NetBSD dynarc 1.4.1 NetBSD 1.4.1 (GENERIC) #1: Tue Aug 10 00:03:09 MEST 1999
 fvdl@struis:/usr/src/sys/arch/i386/compile/GENERIC i386 
>Description:

1. Add the route with the destination address as the IP address on the same subnet.
     route add IPA IPB
   Both IPA and IPB are on the same subnet.

2. Ping to the IPA.
3. IPB sends the ICMP redirect and the route is modified showing IPA->IPA.

Now if we try to delete the route for IPA, NetBSD crashes and "db>" pops up.
And it happens everytime we repeat the scenario. 


>How-To-Repeat:

1. Add the route with the destination address as the IP address on the same subnet.
     route add IPA IPB
   Both IPA and IPB are on the same subnet.

2. Ping to the IPA.
3. IPB sends the ICMP redirect and the route is modified showing IPA->IPA.

Now if we try to delete the route for IPA, NetBSD crashes and "db>" pops up.
And it happens everytime we repeat the scenario. 


>Fix:
None
>Release-Note:
>Audit-Trail:
>Unformatted: