From owner-svn-src-all@FreeBSD.ORG Wed May 27 01:56:38 2009 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0E756106564A; Wed, 27 May 2009 01:56:38 +0000 (UTC) (envelope-from adrian@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id F06928FC15; Wed, 27 May 2009 01:56:37 +0000 (UTC) (envelope-from adrian@FreeBSD.org) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.3/8.14.3) with ESMTP id n4R1ubCY080411; Wed, 27 May 2009 01:56:37 GMT (envelope-from adrian@svn.freebsd.org) Received: (from adrian@localhost) by svn.freebsd.org (8.14.3/8.14.3/Submit) id n4R1ubKq080410; Wed, 27 May 2009 01:56:37 GMT (envelope-from adrian@svn.freebsd.org) Message-Id: <200905270156.n4R1ubKq080410@svn.freebsd.org> From: Adrian Chadd Date: Wed, 27 May 2009 01:56:37 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org X-SVN-Group: head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r192870 - head/sys/dev/xen/netfront X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 May 2009 01:56:38 -0000 Author: adrian Date: Wed May 27 01:56:37 2009 New Revision: 192870 URL: http://svn.freebsd.org/changeset/base/192870 Log: Do the invariant check before the mbuf is dereferenced. Modified: head/sys/dev/xen/netfront/netfront.c Modified: head/sys/dev/xen/netfront/netfront.c ============================================================================== --- head/sys/dev/xen/netfront/netfront.c Wed May 27 01:54:26 2009 (r192869) +++ head/sys/dev/xen/netfront/netfront.c Wed May 27 01:56:37 2009 (r192870) @@ -1065,6 +1065,8 @@ xn_txeof(struct netfront_info *np) id = txr->id; m = np->xn_cdata.xn_tx_chain[id]; + KASSERT(m != NULL, ("mbuf not found in xn_tx_chain")); + M_ASSERTVALID(m); /* * Increment packet count if this is the last @@ -1072,8 +1074,6 @@ xn_txeof(struct netfront_info *np) */ if (!m->m_next) ifp->if_opackets++; - KASSERT(m != NULL, ("mbuf not found in xn_tx_chain")); - M_ASSERTVALID(m); if (unlikely(gnttab_query_foreign_access( np->grant_tx_ref[id]) != 0)) { printf("network_tx_buf_gc: warning "