Fix the cleanup handling in a error path for TCP BBR.

Reported by:		syzbot+df7899c55c4cc52f5447@syzkaller.appspotmail.com
Reviewed by:		rscheff
Sponsored by:		Netflix, Inc.
Differential Revision:	https://reviews.freebsd.org/D25486
This commit is contained in:
Michael Tuexen 2020-07-01 17:17:06 +00:00
parent e4fc3b653a
commit e54b7cd007
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=362846

View File

@ -13381,6 +13381,8 @@ bbr_output_wtime(struct tcpcb *tp, const struct timeval *tv)
*/
BBR_STAT_INC(bbr_offset_drop);
tcp_set_inp_to_drop(inp, EFAULT);
SOCKBUF_UNLOCK(sb);
(void)m_free(m);
return (0);
}
len = rsm->r_end - rsm->r_start;