From owner-cvs-all@FreeBSD.ORG Wed Jun 29 17:54:02 2005 Return-Path: X-Original-To: cvs-all@FreeBSD.org Delivered-To: cvs-all@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0D80A16A41C; Wed, 29 Jun 2005 17:54:02 +0000 (GMT) (envelope-from damien@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id D983C43D49; Wed, 29 Jun 2005 17:54:01 +0000 (GMT) (envelope-from damien@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j5THs1Xv029022; Wed, 29 Jun 2005 17:54:01 GMT (envelope-from damien@repoman.freebsd.org) Received: (from damien@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j5THs1Dd029021; Wed, 29 Jun 2005 17:54:01 GMT (envelope-from damien) Message-Id: <200506291754.j5THs1Dd029021@repoman.freebsd.org> From: Damien Bergamini Date: Wed, 29 Jun 2005 17:54:01 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: src/sys/dev/ral if_ral.c X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jun 2005 17:54:02 -0000 damien 2005-06-29 17:54:01 UTC FreeBSD src repository Modified files: sys/dev/ral if_ral.c Log: o Fix a write mbuf-after-free bug. The duration field of the 802.11 header was written in the old fragmented mbuf chain instead of the defragmented one. Thus, the duration field of outgoing frames was incorrect. o Only call m_defrag() if the mbuf fragmentation threshold is greater than what is currently supported by the driver. Reviewed by: silby (mentor) Approved by: re (scottl) Revision Changes Path 1.4 +23 -9 src/sys/dev/ral/if_ral.c