diff options
| author | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2019-02-04 21:40:53 +0000 |
|---|---|---|
| committer | Alexander Bluhm <bluhm@cvs.openbsd.org> | 2019-02-04 21:40:53 +0000 |
| commit | 4425e9bbfb4c5db368521828a0a414813d286ead (patch) | |
| tree | 3b48fa737daccb525ea8d9d22d874f6b9e58178b /include | |
| parent | f26d6481410d505c29f1fb0f7f5bbd5f526698f4 (diff) | |
Avoid an mbuf double free in the oob soreceive() path. In the
usrreq functions move the mbuf m_freem() logic to the release block
instead of distributing it over the switch statement. Then the
goto release in the initial check, whether the pcb still exists,
will not free the mbuf for the PRU_RCVD, PRU_RVCOOB, PRU_SENSE
command.
OK claudio@ mpi@ visa@
Reported-by: syzbot+8e7997d4036ae523c79c@syzkaller.appspotmail.com
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions