Date: Thu, 14 Oct 2010 18:31:40 +0000 (UTC) From: Pyun YongHyeon <yongari@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/dev/age if_age.c src/sys/dev/alc if_alc.c src/sys/dev/ale if_ale.c src/sys/dev/bce if_bce.c src/sys/dev/bge if_bge.c src/sys/dev/fxp if_fxp.c src/sys/dev/jme if_jme.c src/sys/dev/sge if_sge.c Message-ID: <201010141832.o9EIW70U004306@repoman.freebsd.org>
index | next in thread | raw e-mail
yongari 2010-10-14 18:31:40 UTC
FreeBSD src repository
Modified files:
sys/dev/age if_age.c
sys/dev/alc if_alc.c
sys/dev/ale if_ale.c
sys/dev/bce if_bce.c
sys/dev/bge if_bge.c
sys/dev/fxp if_fxp.c
sys/dev/jme if_jme.c
sys/dev/sge if_sge.c
Log:
SVN rev 213844 on 2010-10-14 18:31:40Z by yongari
Make sure to not use stale ip/tcp header pointers. The ip/tcp
header parser uses m_pullup(9) to get access to mbuf chain.
m_pullup(9) can allocate new mbuf chain and free old one if the
space left in the mbuf chain is not enough to hold requested
contiguous bytes. Previously drivers can use stale ip/tcp header
pointer if m_pullup(9) returned new mbuf chain.
Reported by: Andrew Boyer (aboyer <> averesystems dot com)
MFC after: 10 days
Revision Changes Path
1.15 +1 -0 src/sys/dev/age/if_age.c
1.19 +2 -0 src/sys/dev/alc/if_alc.c
1.11 +1 -0 src/sys/dev/ale/if_ale.c
1.82 +2 -0 src/sys/dev/bce/if_bce.c
1.325 +2 -0 src/sys/dev/bge/if_bge.c
1.306 +2 -0 src/sys/dev/fxp/if_fxp.c
1.16 +2 -1 src/sys/dev/jme/if_jme.c
1.18 +2 -0 src/sys/dev/sge/if_sge.c
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201010141832.o9EIW70U004306>