Date: Thu, 20 Jun 2002 05:47:52 -0700 (PDT) From: Alex Ai <alexai709@msn.com> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/39571: free NULL mbuf in function icmp_errer() Message-ID: <200206201247.g5KClqVC025775@www.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 39571
>Category: kern
>Synopsis: free NULL mbuf in function icmp_errer()
>Confidential: no
>Severity: critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Jun 20 05:50:03 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator: Alex Ai
>Release: 4.5
>Organization:
broadi. Ltd
>Environment:
>Description:
try to free already freed or NULL mbuf pointer in function icmp_errer()@/sys/netinet/ip_icmp.c: which cause system halt
;;;
m_free(m);
goto freeit;
;;;
if(m==NULL)
goto freeit;
freeit:
m_free(m);
>How-To-Repeat:
see the code
>Fix:
not to free it twice. just return. :-)
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200206201247.g5KClqVC025775>