From 3543e138e5e2bb4517dfec1178ad0e385eee0b60 Mon Sep 17 00:00:00 2001 From: Mark Johnston Date: Wed, 2 Mar 2016 05:04:04 +0000 Subject: [PATCH] Set tres to NULL to avoid a double free if the m_pullup() below fails. Reviewed by: glebius MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D5497 --- sys/netipsec/key.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c index 85b6e79e0911..ff580c78711e 100644 --- a/sys/netipsec/key.c +++ b/sys/netipsec/key.c @@ -3490,6 +3490,7 @@ key_setdumpsa(struct secasvar *sav, u_int8_t type, u_int8_t satype, } m_cat(result, tres); + tres = NULL; if (result->m_len < sizeof(struct sadb_msg)) { result = m_pullup(result, sizeof(struct sadb_msg)); if (result == NULL)