Bjoern A. Zeeb
6675bee81a
In icmp6_rip6_input(), once we have a lock, make sure the inp is
...
not freed. This can happen since the list traversal and locking
was converted to epoch(9). If the inp is marked "freed", skip it.
This prevents a NULL pointer deref panic in ip6_savecontrol_v4()
trying to access the socket hanging off the inp, which was gone
by the time we got there.
Reported by: andrew
Tested by: andrew
Approved by: re (gjb)
2018-09-20 15:45:53 +00:00
..
2018-03-24 12:43:34 +00:00
2018-08-31 08:37:15 +00:00
2018-09-20 15:45:53 +00:00
2018-06-16 08:26:23 +00:00
2018-08-16 09:19:06 +00:00
2018-08-15 20:23:08 +00:00
2018-04-06 17:35:35 +00:00
2018-08-22 04:09:55 +00:00
2018-09-10 19:00:29 +00:00
2017-11-27 15:23:17 +00:00
2018-08-14 17:27:41 +00:00
2018-07-24 16:35:52 +00:00
2018-07-24 16:35:52 +00:00
2018-08-15 20:23:08 +00:00
2018-07-17 11:33:23 +00:00
2018-08-14 17:27:41 +00:00
2018-05-02 22:11:16 +00:00
2018-03-23 16:56:44 +00:00
2018-07-24 16:35:52 +00:00
2017-12-28 20:40:56 +00:00
2018-08-14 07:54:14 +00:00
2018-07-24 16:35:52 +00:00
2018-09-03 22:27:27 +00:00
2018-08-14 17:27:41 +00:00
2018-05-02 19:36:29 +00:00
2018-08-21 23:03:02 +00:00
2017-11-27 15:23:17 +00:00
2018-07-24 16:35:52 +00:00
2018-07-24 16:35:52 +00:00
2018-07-24 16:35:52 +00:00
2017-12-25 04:48:39 +00:00
2018-06-05 20:51:01 +00:00
2018-07-04 02:47:16 +00:00
2018-06-05 20:54:29 +00:00
2018-07-24 16:35:52 +00:00
2018-08-14 08:33:47 +00:00
2018-07-19 20:16:33 +00:00
2018-07-24 16:35:52 +00:00
2017-11-27 15:23:17 +00:00
2018-09-19 18:49:37 +00:00