Date: Mon, 3 Jul 2006 23:14:29 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/netinet ip_output.c Message-ID: <200607032314.k63NETLI051629@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2006-07-03 23:14:29 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_6)
sys/netinet ip_output.c
Log:
In ip_ctloutput(), check for a NULL inpcb pointer before dereferencing,
as this can occur with TCP if protocol-layer socket options are set or
queried after the connection has closed. There are still races
associated with ip_ctloutput() and connection close with TCP, corrected
in HEAD via a more comprehensive set of changes, but this fixes the
trivial panic reported on several occasions.
This is a RELENG_6_1 and RELENG_6_0 errata branch candidate.
PR: 97095
Tested by: Stanislaw Halik <sthalik at tehran dot lain dot pl>
MFC after: 3 days
Revision Changes Path
1.242.2.10 +3 -0 src/sys/netinet/ip_output.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200607032314.k63NETLI051629>