]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Clear the pointer to the socket when closing it also in case of
authortuexen <tuexen@FreeBSD.org>
Thu, 23 Jul 2020 19:43:49 +0000 (19:43 +0000)
committertuexen <tuexen@FreeBSD.org>
Thu, 23 Jul 2020 19:43:49 +0000 (19:43 +0000)
commitecb61b759901582d2e29e968d24371e9680cd8d6
tree4f66b68c368f3d55bff057e3c6c9ae3e3dbbab8c
parentb03abee6f4d77a21e5a7e3e55ec342cc93b431cc
Clear the pointer to the socket when closing it also in case of
an ungraceful operation.
This fixes a use-after-free bug found and reported by Taylor
Brandstetter of Google by testing the userland stack.

MFC after: 1 week
sys/netinet/sctp_pcb.c