diff options
| author | ozaki-r <ozaki-r@NetBSD.org> | 2018-01-09 04:41:19 +0000 |
|---|---|---|
| committer | ozaki-r <ozaki-r@NetBSD.org> | 2018-01-09 04:41:19 +0000 |
| commit | fbff23c2c3fa0fde893d2ee19aeee74733ce6d06 (patch) | |
| tree | 0ec640119c999f95ce7ab6536856a221f92459cd /sys/netinet6/ip6_forward.c | |
| parent | a55c4d8eb3efd8830626b25c1accadeb5c2fa98d (diff) | |
Fix use-after-free of mbuf by ip6flow_create (one more)
XXX need pullup-[678]
Diffstat (limited to 'sys/netinet6/ip6_forward.c')
| -rw-r--r-- | sys/netinet6/ip6_forward.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/netinet6/ip6_forward.c b/sys/netinet6/ip6_forward.c index 4a48bb16801..db08e6a9f37 100644 --- a/sys/netinet6/ip6_forward.c +++ b/sys/netinet6/ip6_forward.c @@ -1,4 +1,4 @@ -/* $NetBSD: ip6_forward.c,v 1.89 2018/01/09 04:21:26 ozaki-r Exp $ */ +/* $NetBSD: ip6_forward.c,v 1.90 2018/01/09 04:41:19 ozaki-r Exp $ */ /* $KAME: ip6_forward.c,v 1.109 2002/09/11 08:10:17 sakane Exp $ */ /* @@ -31,7 +31,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: ip6_forward.c,v 1.89 2018/01/09 04:21:26 ozaki-r Exp $"); +__KERNEL_RCSID(0, "$NetBSD: ip6_forward.c,v 1.90 2018/01/09 04:41:19 ozaki-r Exp $"); #ifdef _KERNEL_OPT #include "opt_gateway.h" @@ -415,7 +415,7 @@ ip6_forward(struct mbuf *m, int srcrt) /* Need to release rt here */ rtcache_unref(rt, ro); rt = NULL; - if (m->m_flags & M_CANFASTFWD) + if (mcopy->m_flags & M_CANFASTFWD) ip6flow_create(ro, mcopy); #endif if (mcopy) |
