d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Rather than m_free(dtom(si)) in spx_reass(), return (1) which causes the

Browse Source 
caller to free the mbuf without using dtom().

MFC after:	3 days
This commit is contained in:
Robert Watson 2008-05-29 07:18:43 +00:00
parent 1454b5785e
commit 9dea35a10a
1 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
sys/netipx/spx_usrreq.c
View File

@ -596,10 +596,8 @@ update_window:
} else
spxstat.spxs_rcvpackafterwin++;
if (si->si_cc & SPX_OB) {
if (SSEQ_GT(si->si_seq, cb->s_alo + 60)) {
m_freem(dtom(si));
return (0);
} /* else queue this packet; */
if (SSEQ_GT(si->si_seq, cb->s_alo + 60))
return (1); /* else queue this packet; */
} else {
#ifdef BROKEN
/*
@ -615,8 +613,7 @@ update_window:
would crash system*/
#endif
spx_istat.notyet++;
m_freem(dtom(si));
return (0);
return (1);
}
}