Module Name: src Committed By: msaitoh Date: Fri Sep 13 04:17:41 UTC 2013
Modified Files: src/sys/net/npf [netbsd-6-1]: npf_inet.c Log Message: Pull up following revision (requested by riz in ticket #942): /sys/net/npf/npf_inet.c revision 1.23 Fix bugs to prevent panic: - npf_cache_ip: re-fetch IPv6 header since nbufs might have been reallocated. - npf_cache_all: clear NBUF_DATAREF_RESET since npf_cache_ip() handles it. To generate a diff of this commit: cvs rdiff -u -r1.10.4.9 -r1.10.4.9.2.1 src/sys/net/npf/npf_inet.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/sys/net/npf/npf_inet.c diff -u src/sys/net/npf/npf_inet.c:1.10.4.9 src/sys/net/npf/npf_inet.c:1.10.4.9.2.1 --- src/sys/net/npf/npf_inet.c:1.10.4.9 Mon Feb 11 21:49:49 2013 +++ src/sys/net/npf/npf_inet.c Fri Sep 13 04:17:41 2013 @@ -1,4 +1,4 @@ -/* $NetBSD: npf_inet.c,v 1.10.4.9 2013/02/11 21:49:49 riz Exp $ */ +/* $NetBSD: npf_inet.c,v 1.10.4.9.2.1 2013/09/13 04:17:41 msaitoh Exp $ */ /*- * Copyright (c) 2009-2012 The NetBSD Foundation, Inc. @@ -39,7 +39,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: npf_inet.c,v 1.10.4.9 2013/02/11 21:49:49 riz Exp $"); +__KERNEL_RCSID(0, "$NetBSD: npf_inet.c,v 1.10.4.9.2.1 2013/09/13 04:17:41 msaitoh Exp $"); #include <sys/param.h> #include <sys/types.h> @@ -391,8 +391,12 @@ npf_cache_ip(npf_cache_t *npc, nbuf_t *n npc->npc_hlen += hlen; } - /* Restore the offset. */ + /* + * Re-fetch the header pointers (nbufs might have been + * reallocated). Restore the original offset (if any). + */ nbuf_reset(nbuf); + ip6 = nbuf_dataptr(nbuf); if (off) { nbuf_advance(nbuf, off, 0); } @@ -437,6 +441,7 @@ again: */ flags = npf_cache_ip(npc, nbuf); if ((flags & NPC_IP46) == 0 || (flags & NPC_IPFRAG) != 0) { + nbuf_unset_flag(nbuf, NBUF_DATAREF_RESET); npc->npc_info |= flags; return flags; }