git: kernel - Fix ENOBUFS related panic in tcp_output

Matthew Dillon dillon at crater.dragonflybsd.org
Sun Jan 1 12:16:16 PST 2012


commit 7f84a1ea252f031c74a5896f5eeb10fc5ef2df0f
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date:   Sun Jan 1 12:14:40 2012 -0800

    kernel - Fix ENOBUFS related panic in tcp_output
    
    * If the tcp_output code gets all the way to the end but then has to
      'goto again', it fails to NULL out the (th) pointer.  If the mbuf fails
      on the retry (m == NULL), the non-NULL (th) winds up causing the code to
      believe that the mbuf is good and results in a null-pointer dereference.

Summary of changes:
 sys/netinet/tcp_output.c |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/7f84a1ea252f031c74a5896f5eeb10fc5ef2df0f


-- 
DragonFly BSD source repository





More information about the Commits mailing list