Date: Fri, 1 Jul 2005 22:52:47 +0000 (UTC) From: Paul Saab <ps@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet tcp_input.c Message-ID: <200507012252.j61Mqlx7025653@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
ps 2005-07-01 22:52:47 UTC
FreeBSD src repository
Modified files:
sys/netinet tcp_input.c
Log:
Fix for a SACK crash caused by a bug in tcp_reass(). tcp_reass()
does not clear tlen and frees the mbuf (leaving th pointing at
freed memory), if the data segment is a complete duplicate.
This change works around that bug. A fix for the tcp_reass() bug
will appear later (that bug is benign for now, as neither th nor
tlen is referenced in tcp_input() after the call to tcp_reass()).
Found by: Pawel Jakub Dawidek.
Submitted by: Raja Mukerji, Noritoshi Demizu.
Approved by: re
Revision Changes Path
1.279 +3 -1 src/sys/netinet/tcp_input.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200507012252.j61Mqlx7025653>