Date: Wed, 24 Jun 2009 14:29:40 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/sys/netinet ip_input.c Message-ID: <200906241430.n5OEU2ta008869@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2009-06-24 14:29:40 UTC
FreeBSD src repository
Modified files:
sys/netinet ip_input.c
Log:
SVN rev 194835 on 2009-06-24 14:29:40Z by rwatson
Clear 'ia' after iterating if_addrhead for unicast address matching: since
'ifa' was used as the TAILQ_FOREACH() iterator argument, and 'ia' was just
derived form it, it could be left non-NULL which confused later
conditional freeing code. This could cause kernel panics if multicast IP
packets were received. [1]
Call 'struct in_ifaddr *' in ip_rtaddr() 'ia', not 'ifa' in keeping with
normal conventions.
When 'ipstealth' is enabled returns from ip_input early, properly release
the 'ia' reference.
Reported by: lstewart, sam [1]
MFC after: 6 weeks
Revision Changes Path
1.366 +9 -6 src/sys/netinet/ip_input.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200906241430.n5OEU2ta008869>