d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use TAILQ_FOREACH_SAFE() macro to avoid use after free in soclose().

Browse Source 
PR:		239893
MFC after:	1 week
This commit is contained in:
ae 2019-08-19 12:42:03 +00:00
parent 6261923e4c
commit 700a658772
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/kern/uipc_socket.c
View File

@ -1131,9 +1131,9 @@ drop:
so->so_state |= SS_NOFDREF;
sorele(so);
if (listening) {
struct socket *sp;
struct socket *sp, *tsp;
TAILQ_FOREACH(sp, &lqueue, so_list) {
TAILQ_FOREACH_SAFE(sp, &lqueue, so_list, tsp) {
SOCK_LOCK(sp);
if (sp->so_count == 0) {
SOCK_UNLOCK(sp);