Module Name: src
Committed By: christos
Date: Sun Apr 23 19:09:29 UTC 2017
Modified Files:
src/sys/external/bsd/ipf/netinet: ip_frag.c
Log Message:
Free the right fragment (Cy Schubert @ FreeBSD). This will cause use after free
issues and eventually panic.
To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 src/sys/external/bsd/ipf/netinet/ip_frag.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/sys/external/bsd/ipf/netinet/ip_frag.c
diff -u src/sys/external/bsd/ipf/netinet/ip_frag.c:1.4 src/sys/external/bsd/ipf/netinet/ip_frag.c:1.5
--- src/sys/external/bsd/ipf/netinet/ip_frag.c:1.4 Fri Jan 13 10:17:00 2017
+++ src/sys/external/bsd/ipf/netinet/ip_frag.c Sun Apr 23 15:09:29 2017
@@ -1,4 +1,4 @@
-/* $NetBSD: ip_frag.c,v 1.4 2017/01/13 15:17:00 christos Exp $ */
+/* $NetBSD: ip_frag.c,v 1.5 2017/04/23 19:09:29 christos Exp $ */
/*
* Copyright (C) 2012 by Darren Reed.
@@ -87,7 +87,7 @@ struct file;
#if !defined(lint)
#if defined(__NetBSD__)
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: ip_frag.c,v 1.4 2017/01/13 15:17:00 christos Exp $");
+__KERNEL_RCSID(0, "$NetBSD: ip_frag.c,v 1.5 2017/04/23 19:09:29 christos Exp $");
#else
static const char sccsid[] = "@(#)ip_frag.c 1.11 3/24/96 (C) 1993-2000 Darren Reed";
static const char rcsid[] = "@(#)Id: ip_frag.c,v 1.1.1.2 2012/07/22 13:45:17 darrenr Exp";
@@ -468,7 +468,7 @@ ipfr_frag_new(
IPFR_CMPSZ)) {
RWLOCK_EXIT(lock);
FBUMPD(ifs_exists);
- KFREE(fra);
+ KFREE(fran);
return NULL;
}
