From 770aa6cb258437e2560535a756d7948becaa0dbc Mon Sep 17 00:00:00 2001
From: Gleb Smirnoff <glebius@FreeBSD.org>
Date: Thu, 4 Sep 2014 19:28:02 +0000
Subject: [PATCH] Satisfy assertion in m_demote().

Sponsored by:	Nginx, Inc.
---
 sys/netinet/tcp_reass.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sys/netinet/tcp_reass.c b/sys/netinet/tcp_reass.c
index d7efe1d34f70..dffee00f9b18 100644
--- a/sys/netinet/tcp_reass.c
+++ b/sys/netinet/tcp_reass.c
@@ -231,6 +231,7 @@ tcp_reass(struct tcpcb *tp, struct tcphdr *th, int *tlenp, struct mbuf *m)
 		tp->t_segq = m;
 		if (mq && th->th_seq + *tlenp == M_TCPHDR(mq)->th_seq) {
 			m->m_nextpkt = mq->m_nextpkt;
+			mq->m_nextpkt = NULL;
 			m_catpkt(m, mq);
 		} else
 			m->m_nextpkt = mq;