CVSROOT: /cvs Module name: src Changes by: [email protected] 2017/05/11 05:22:30
Modified files:
sys/netinet : Tag: OPENBSD_6_1 igmp.c ip_icmp.c
Log message:
If m is not a continuous mbuf cluster, m_pullup() in pr_input may
change the pointer. Then *mp keeps the invalid pointer and it might
be used. Fix the potential use after free in igmp_input_if() and
icmp_input_if(). As the input buffers normally deal with mbuf
clusters, the use after free should not happen.
OK mikeb@ mpi@
