From owner-cvs-src-old@FreeBSD.ORG Thu Oct 14 18:32:07 2010 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D98E8106566B for ; Thu, 14 Oct 2010 18:32:07 +0000 (UTC) (envelope-from yongari@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id C3DBA8FC13 for ; Thu, 14 Oct 2010 18:32:07 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id o9EIW7Ce004307 for ; Thu, 14 Oct 2010 18:32:07 GMT (envelope-from yongari@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id o9EIW70U004306 for cvs-src-old@freebsd.org; Thu, 14 Oct 2010 18:32:07 GMT (envelope-from yongari@repoman.freebsd.org) Message-Id: <201010141832.o9EIW70U004306@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to yongari@repoman.freebsd.org using -f From: Pyun YongHyeon Date: Thu, 14 Oct 2010 18:31:40 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/dev/age if_age.c src/sys/dev/alc if_alc.c src/sys/dev/ale if_ale.c src/sys/dev/bce if_bce.c src/sys/dev/bge if_bge.c src/sys/dev/fxp if_fxp.c src/sys/dev/jme if_jme.c src/sys/dev/sge if_sge.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Oct 2010 18:32:07 -0000 yongari 2010-10-14 18:31:40 UTC FreeBSD src repository Modified files: sys/dev/age if_age.c sys/dev/alc if_alc.c sys/dev/ale if_ale.c sys/dev/bce if_bce.c sys/dev/bge if_bge.c sys/dev/fxp if_fxp.c sys/dev/jme if_jme.c sys/dev/sge if_sge.c Log: SVN rev 213844 on 2010-10-14 18:31:40Z by yongari Make sure to not use stale ip/tcp header pointers. The ip/tcp header parser uses m_pullup(9) to get access to mbuf chain. m_pullup(9) can allocate new mbuf chain and free old one if the space left in the mbuf chain is not enough to hold requested contiguous bytes. Previously drivers can use stale ip/tcp header pointer if m_pullup(9) returned new mbuf chain. Reported by: Andrew Boyer (aboyer <> averesystems dot com) MFC after: 10 days Revision Changes Path 1.15 +1 -0 src/sys/dev/age/if_age.c 1.19 +2 -0 src/sys/dev/alc/if_alc.c 1.11 +1 -0 src/sys/dev/ale/if_ale.c 1.82 +2 -0 src/sys/dev/bce/if_bce.c 1.325 +2 -0 src/sys/dev/bge/if_bge.c 1.306 +2 -0 src/sys/dev/fxp/if_fxp.c 1.16 +2 -1 src/sys/dev/jme/if_jme.c 1.18 +2 -0 src/sys/dev/sge/if_sge.c