Date: Fri, 14 May 2021 14:13:40 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 255879] [PATCH] netpfil/ipfw: Fix a double free in codel_enqueue Message-ID: <bug-255879-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D255879 Bug ID: 255879 Summary: [PATCH] netpfil/ipfw: Fix a double free in codel_enqueue Product: Base System Version: CURRENT Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: lylgood@foxmail.com Created attachment 224942 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D224942&action= =3Dedit removes the redundant m_freem() in drop branch. Bug File: sys/netpfil/ipfw/dn_sched_fq_codel.c In function codel_enqueue, m is freed via m_freem() at line 193. But the freed m is freed again in the drop branch via m_freem() at line 205, which is a double free bug. My patch removes the redundant m_freem() in drop branch. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-255879-227>