summaryrefslogtreecommitdiff
path: root/sys/dev/microcode
diff options
context:
space:
mode:
authorchristos <christos@NetBSD.org>2013-10-08 00:29:24 +0000
committerchristos <christos@NetBSD.org>2013-10-08 00:29:24 +0000
commit188060c403f949fc06d8acc7709a78ba1a2c08a9 (patch)
tree18187120497b1aab90f61bc04e4b6c077c08a7b4 /sys/dev/microcode
parent8e8e8a1949d6e8a19b35d7d839657fb04bebf09c (diff)
PR/47591: Michael Plass: If the unix socket is closed before accept,
unp->unp_conn will be NULL in PRU_ACCEPT, as called from sys_accept->so_accept. This will cause the usrreq to return with no error, leaving the mbuf gotten from m_get() with an uninitialized length, containing junk from a previous call. Initialize m_len to be 0 to handle this case. This is yet another reason why Beverly's idea of setting m_len = 0 in m_get() makes a lot of sense. Arguably this could be an error, since the data we return now has 0 family and length.
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions