From 2be3bf224442f3bf028bed3313e69043cdca2268 Mon Sep 17 00:00:00 2001
From: Robert Watson <rwatson@FreeBSD.org>
Date: Sun, 28 Nov 2004 11:06:22 +0000
Subject: [PATCH] Assert the inpcb lock in tcp_xmit_timer() as it performs
 read-modify- write of various time/rtt-related fields in the tcpcb.

---
 sys/netinet/tcp_input.c | 2 ++
 sys/netinet/tcp_reass.c | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c
index 92956661996..3eb7fc84192 100644
--- a/sys/netinet/tcp_input.c
+++ b/sys/netinet/tcp_input.c
@@ -2640,6 +2640,8 @@ tcp_xmit_timer(tp, rtt)
 {
 	register int delta;
 
+	INP_LOCK_ASSERT(tp->t_inpcb);
+
 	tcpstat.tcps_rttupdated++;
 	tp->t_rttupdated++;
 	if (tp->t_srtt != 0) {
diff --git a/sys/netinet/tcp_reass.c b/sys/netinet/tcp_reass.c
index 92956661996..3eb7fc84192 100644
--- a/sys/netinet/tcp_reass.c
+++ b/sys/netinet/tcp_reass.c
@@ -2640,6 +2640,8 @@ tcp_xmit_timer(tp, rtt)
 {
 	register int delta;
 
+	INP_LOCK_ASSERT(tp->t_inpcb);
+
 	tcpstat.tcps_rttupdated++;
 	tp->t_rttupdated++;
 	if (tp->t_srtt != 0) {