From 159c9364d9bd6b7e517fb24e51ea68177e1a732c Mon Sep 17 00:00:00 2001
From: ae <ae@FreeBSD.org>
Date: Thu, 26 Mar 2015 18:44:59 +0000
Subject: [PATCH] MFC r280236:   To avoid a possible race, release the
 reference to ifa after return   from nd6_dad_na_input().

---
 sys/netinet6/nd6_nbr.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/netinet6/nd6_nbr.c b/sys/netinet6/nd6_nbr.c
index 75ec443cb705..2d5b9412c20d 100644
--- a/sys/netinet6/nd6_nbr.c
+++ b/sys/netinet6/nd6_nbr.c
@@ -700,8 +700,8 @@ nd6_na_input(struct mbuf *m, int off, int icmp6len)
 	 */
 	if (ifa
 	 && (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_TENTATIVE)) {
-		ifa_free(ifa);
 		nd6_dad_na_input(ifa);
+		ifa_free(ifa);
 		goto freeit;
 	}