]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Fix a crash in tcp_input(), that happens when mbuf has a fwd_tag on it,
authorGleb Smirnoff <glebius@FreeBSD.org>
Wed, 12 Dec 2012 17:41:21 +0000 (17:41 +0000)
committerGleb Smirnoff <glebius@FreeBSD.org>
Wed, 12 Dec 2012 17:41:21 +0000 (17:41 +0000)
commit78a7880f64bb55d805cc893d03f6cc42ceb0aa3e
treef3aa7fc7cd0d4a782eb11a9368342585ee71a58e
parent83da9362b7ebd779b80c98b45e11f8b430d82a48
  Fix a crash in tcp_input(), that happens when mbuf has a fwd_tag on it,
but later after processing and freeing the tag, we need to jump back again
to the findpcb label. Since the fwd_tag pointer wasn't NULL we tried to
process and free the tag for second time.

Reported & tested by: Pawel Tyll <ptyll nitronet.pl>
MFC after: 3 days
sys/netinet/tcp_input.c