Fix the cleanup handling in a error path for TCP BBR.
Reported by: syzbot+df7899c55c4cc52f5447@syzkaller.appspotmail.com Reviewed by: rscheff Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D25486
This commit is contained in:
parent
e4fc3b653a
commit
e54b7cd007
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=362846
@ -13381,6 +13381,8 @@ bbr_output_wtime(struct tcpcb *tp, const struct timeval *tv)
|
|||||||
*/
|
*/
|
||||||
BBR_STAT_INC(bbr_offset_drop);
|
BBR_STAT_INC(bbr_offset_drop);
|
||||||
tcp_set_inp_to_drop(inp, EFAULT);
|
tcp_set_inp_to_drop(inp, EFAULT);
|
||||||
|
SOCKBUF_UNLOCK(sb);
|
||||||
|
(void)m_free(m);
|
||||||
return (0);
|
return (0);
|
||||||
}
|
}
|
||||||
len = rsm->r_end - rsm->r_start;
|
len = rsm->r_end - rsm->r_start;
|
||||||
|
Loading…
Reference in New Issue
Block a user