]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
MFS r352672:
authorMichael Tuexen <tuexen@FreeBSD.org>
Thu, 3 Oct 2019 11:20:56 +0000 (11:20 +0000)
committerMichael Tuexen <tuexen@FreeBSD.org>
Thu, 3 Oct 2019 11:20:56 +0000 (11:20 +0000)
commit685fa9cac29a502bd6f932c8e248017005c3834b
tree2e42ca42e7bdd850aa3b50116e862ff154a99622
parent7729f9fb0277ced9d695607f72d48cbaa6222f3a
MFS r352672:

When processing an incoming IPv6 packet over the loopback interface which
contains Hop-by-Hop options, the mbuf chain is potentially changed in
ip6_hopopts_input(), called by ip6_input_hbh().
This can happen, because of the the use of IP6_EXTHDR_CHECK, which might
call m_pullup().
So provide the updated pointer back to the called of ip6_input_hbh() to
avoid using a freed mbuf chain inip6_input().

Approved by: re (kib@)
Reviewed by: markj@
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D21664
sys/netinet6/ip6_input.c