From owner-cvs-src-old@FreeBSD.ORG  Wed Jun 24 14:30:02 2009
Return-Path: <owner-cvs-src-old@FreeBSD.ORG>
Delivered-To: cvs-src-old@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id DEAB71065704
	for <cvs-src-old@freebsd.org>; Wed, 24 Jun 2009 14:30:02 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id C6E8B8FC2A
	for <cvs-src-old@freebsd.org>; Wed, 24 Jun 2009 14:30:02 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n5OEU2J2008870
	for <cvs-src-old@freebsd.org>; Wed, 24 Jun 2009 14:30:02 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n5OEU2ta008869
	for cvs-src-old@freebsd.org; Wed, 24 Jun 2009 14:30:02 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Message-Id: <200906241430.n5OEU2ta008869@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	rwatson@repoman.freebsd.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
Date: Wed, 24 Jun 2009 14:29:40 +0000 (UTC)
To: cvs-src-old@freebsd.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/netinet ip_input.c
X-BeenThere: cvs-src-old@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: **OBSOLETE** CVS commit messages for the src tree
	<cvs-src-old.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src-old>
List-Post: <mailto:cvs-src-old@freebsd.org>
List-Help: <mailto:cvs-src-old-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 24 Jun 2009 14:30:03 -0000

rwatson     2009-06-24 14:29:40 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_input.c 
  Log:
  SVN rev 194835 on 2009-06-24 14:29:40Z by rwatson
  
  Clear 'ia' after iterating if_addrhead for unicast address matching: since
  'ifa' was used as the TAILQ_FOREACH() iterator argument, and 'ia' was just
  derived form it, it could be left non-NULL which confused later
  conditional freeing code.  This could cause kernel panics if multicast IP
  packets were received.  [1]
  
  Call 'struct in_ifaddr *' in ip_rtaddr() 'ia', not 'ifa' in keeping with
  normal conventions.
  
  When 'ipstealth' is enabled returns from ip_input early, properly release
  the 'ia' reference.
  
  Reported by:    lstewart, sam [1]
  MFC after:      6 weeks
  
  Revision  Changes    Path
  1.366     +9 -6      src/sys/netinet/ip_input.c