d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Handle locking and memory safety for IPV6_PATHMTU in ip6_ctloutput().

Browse Source 
Submitted by:	Jason Eggleston <jason@eggnet.com>
Reviewed by:	ae
Sponsored by:	Limelight Networks
Differential Revision:	https://reviews.freebsd.org/D14622
This commit is contained in:
Sean Bruno 2018-03-22 21:18:34 +00:00
parent c398200721
commit 5cbeca4497
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
sys/netinet6/ip6_output.c
View File

@ -2053,6 +2053,7 @@ do { \
{
u_long pmtu = 0;
struct ip6_mtuinfo mtuinfo;
struct in6_addr addr;
if (!(so->so_state & SS_ISCONNECTED))
return (ENOTCONN);
@ -2060,9 +2061,14 @@ do { \
* XXX: we dot not consider the case of source
* routing, or optional information to specify
* the outgoing interface.
* Copy faddr out of in6p to avoid holding lock
* on inp during route lookup.
*/
INP_RLOCK(in6p);
bcopy(&in6p->in6p_faddr, &addr, sizeof(addr));
INP_RUNLOCK(in6p);
error = ip6_getpmtu_ctl(so->so_fibnum,
&in6p->in6p_faddr, &pmtu);
&addr, &pmtu);
if (error)
break;
if (pmtu > IPV6_MAXPACKET)