diff options
| author | Claudio Jeker <claudio@cvs.openbsd.org> | 2017-07-19 07:02:53 +0000 |
|---|---|---|
| committer | Claudio Jeker <claudio@cvs.openbsd.org> | 2017-07-19 07:02:53 +0000 |
| commit | ec37331668fe8c718e98889703c1f2a9d04def5b (patch) | |
| tree | 3e1db4c7dc44b827427242bd76a0eba9783bc6ae /usr.bin | |
| parent | 857c546f26a920622fb7df5a262f5b63e5033dda (diff) | |
Fix possible double free in the TX dma ring handling. If the allocation of
the cluster fails in vte_init_tx_ring() the mbuf is removed but the slot
in the ring still holds the pointer. A possible call to vte_stop() would
then cause a double free. Again set pointer to NULL to prevent this.
Found by Ilja Van Sprundel
OK bluhm@
Diffstat (limited to 'usr.bin')
0 files changed, 0 insertions, 0 deletions