From f9443ac92803734259f9a6621e7c3243a98ada29 Mon Sep 17 00:00:00 2001 From: ae Date: Mon, 5 Feb 2018 09:25:53 +0000 Subject: [PATCH] MFC r328770: Merge r1.120 from NetBSD: Fix a pretty simple, yet pretty tragic typo: we should return IPPROTO_DONE, not IPPROTO_NONE. With IPPROTO_NONE we will keep parsing the header chain on an mbuf that was already freed. Reported by: Maxime Villard git-svn-id: svn://svn.freebsd.org/base/stable/10@328878 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f --- sys/netinet6/ip6_mroute.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/netinet6/ip6_mroute.c b/sys/netinet6/ip6_mroute.c index 950a607cf..037571790 100644 --- a/sys/netinet6/ip6_mroute.c +++ b/sys/netinet6/ip6_mroute.c @@ -1840,7 +1840,7 @@ pim6_input(struct mbuf **mp, int *offp, int proto) "of the inner packet", (eip6->ip6_vfc & IPV6_VERSION)); m_freem(m); - return (IPPROTO_NONE); + return (IPPROTO_DONE); } /* verify the inner packet is destined to a mcast group */ -- 2.45.0