https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295129
Bug ID: 295129
Summary: if_geneve.c geneve_udp_input() can use ifp before it
is set
Product: Base System
Version: CURRENT
Hardware: Any
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
geneve_udp_input() has a few "goto out" before it sets ifp, but the
"out" code passes ifp to if_inc_counter(), which can crash due to
ifp holding garbage.
--
You are receiving this mail because:
You are the assignee for the bug.