CVSROOT: /cvs Module name: src Changes by: guent...@cvs.openbsd.org 2012/07/22 12:11:54
Modified files:
sys/kern : uipc_socket.c
Log message:
unp_dispose() walks not just the mbuf chain (m_next) but also the packet
chain (m_nextpkt), so the mbuf passed to it must be disconnected completely
from the socket buffer's chains.
Problem noticed by yasuoka@; tweak from krw@, ok deraadt@
