git: kernel - Fix double-free in if_ath, fix lost rcvif.
Matthew Dillon
dillon at crater.dragonflybsd.org
Mon Apr 24 10:09:12 PDT 2017
commit c75fa8b80405bcd779a670147c468311b9ab3a24
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date: Mon Apr 24 10:06:32 2017 -0700
kernel - Fix double-free in if_ath, fix lost rcvif.
* Reassign rcvif in ieee80211_vap_pkt_send_dest() prior to calling
ic_transmit(). The rcvif assignment can get lost from packet
manipulation above that section of code.
* Fix a double-free in if_ath in the error path for ath_transmit().
Callers of ic_transmit (aka ath_transmit in this case) expect the
mbuf to remain intact on a non-zero error return.
* Document confusing code in WPI.
Reported-by: marino
Reviewed-by: sephe
Summary of changes:
sys/dev/netif/ath/ath/if_ath.c | 5 +----
sys/dev/netif/wpi/if_wpi.c | 5 +++++
sys/netproto/802_11/wlan/ieee80211_output.c | 2 ++
3 files changed, 8 insertions(+), 4 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c75fa8b80405bcd779a670147c468311b9ab3a24
--
DragonFly BSD source repository
More information about the Commits
mailing list