diff options
| author | christos <christos@NetBSD.org> | 2013-10-08 00:29:24 +0000 |
|---|---|---|
| committer | christos <christos@NetBSD.org> | 2013-10-08 00:29:24 +0000 |
| commit | 188060c403f949fc06d8acc7709a78ba1a2c08a9 (patch) | |
| tree | 18187120497b1aab90f61bc04e4b6c077c08a7b4 /sys/dev/microcode | |
| parent | 8e8e8a1949d6e8a19b35d7d839657fb04bebf09c (diff) | |
PR/47591: Michael Plass: If the unix socket is closed before accept,
unp->unp_conn will be NULL in PRU_ACCEPT, as called from
sys_accept->so_accept. This will cause the usrreq to return with
no error, leaving the mbuf gotten from m_get() with an uninitialized
length, containing junk from a previous call. Initialize m_len to
be 0 to handle this case. This is yet another reason why Beverly's
idea of setting m_len = 0 in m_get() makes a lot of sense. Arguably
this could be an error, since the data we return now has 0 family
and length.
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions
