git: kernel - Fix double-free in if_ath, fix lost rcvif.

Matthew Dillon dillon at crater.dragonflybsd.org
Mon Apr 24 10:09:12 PDT 2017


commit c75fa8b80405bcd779a670147c468311b9ab3a24
Author: Matthew Dillon <dillon at apollo.backplane.com>
Date:   Mon Apr 24 10:06:32 2017 -0700

    kernel - Fix double-free in if_ath, fix lost rcvif.
    
    * Reassign rcvif in ieee80211_vap_pkt_send_dest() prior to calling
      ic_transmit().  The rcvif assignment can get lost from packet
      manipulation above that section of code.
    
    * Fix a double-free in if_ath in the error path for ath_transmit().
      Callers of ic_transmit (aka ath_transmit in this case) expect the
      mbuf to remain intact on a non-zero error return.
    
    * Document confusing code in WPI.
    
    Reported-by: marino
    Reviewed-by: sephe

Summary of changes:
 sys/dev/netif/ath/ath/if_ath.c              | 5 +----
 sys/dev/netif/wpi/if_wpi.c                  | 5 +++++
 sys/netproto/802_11/wlan/ieee80211_output.c | 2 ++
 3 files changed, 8 insertions(+), 4 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/c75fa8b80405bcd779a670147c468311b9ab3a24


-- 
DragonFly BSD source repository



More information about the Commits mailing list