diff options
| author | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2023-10-20 16:25:16 +0000 |
|---|---|---|
| committer | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2023-10-20 16:25:16 +0000 |
| commit | 28f2bb92c74374ddb722aaf2585d8a137355a141 (patch) | |
| tree | a8acd95bfc8ecb33fff70247e6041729e07f9cec /bin | |
| parent | c0d3944dbf2f206e9262ed4b32a79167c462d338 (diff) | |
Avoid assertion failure when splitting mbuf cluster.
m_split() calls m_align() to initialize the data pointer of newly
allocated mbuf. If the new mbuf will be converted to a cluster,
this is not necessary. If additionally the new mbuf is larger than
MLEN, this can lead to a panic.
Only call m_align() when a valid m_data is needed. This is the
case if we do not refecence the existing cluster, but memcpy() the
data into the new mbuf.
Reported-by: syzbot+0e6817f5877926f0e96a@syzkaller.appspotmail.com
OK claudio@ deraadt@
Diffstat (limited to 'bin')
0 files changed, 0 insertions, 0 deletions