https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255879

            Bug ID: 255879
           Summary: [PATCH] netpfil/ipfw: Fix a double free in
                    codel_enqueue
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]

Created attachment 224942
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=224942&action=edit
removes the redundant m_freem() in drop branch.

Bug File: sys/netpfil/ipfw/dn_sched_fq_codel.c

In function codel_enqueue, m is freed via m_freem() at line 193.
But the freed m is freed again in the drop branch via m_freem() at line 205,
which is a double free bug.

My patch removes the redundant m_freem() in drop branch.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to