Merge r1.120 from NetBSD:

Fix a pretty simple, yet pretty tragic typo: we should return IPPROTO_DONE,
  not IPPROTO_NONE. With IPPROTO_NONE we will keep parsing the header chain
  on an mbuf that was already freed.

Reported by:	Maxime Villard <max at m00nbsd dot net>
MFC after:	3 days
This commit is contained in:
Andrey V. Elsukov 2018-02-02 07:39:34 +00:00
parent 8299b37f85
commit 883cd89b05
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=328770

View File

@ -1857,7 +1857,7 @@ pim6_input(struct mbuf **mp, int *offp, int proto)
"of the inner packet",
(eip6->ip6_vfc & IPV6_VERSION));
m_freem(m);
return (IPPROTO_NONE);
return (IPPROTO_DONE);
}
/* verify the inner packet is destined to a mcast group */