diff options
| author | rpaulo <rpaulo@NetBSD.org> | 2006-02-14 21:43:02 +0000 |
|---|---|---|
| committer | rpaulo <rpaulo@NetBSD.org> | 2006-02-14 21:43:02 +0000 |
| commit | 1152ca51d5b384f3f34d08df2b8f01ff246eb437 (patch) | |
| tree | 94d932b73fe5bb8bd815c3ce470e30e4d33965ee /sys/netinet6/ipcomp_input.c | |
| parent | 6ecd57a7f6a0bcf1c4b7368305c571b3c89f8d0d (diff) | |
From FreeBSD:
In ipcomp6_input(), check 'md' not 'm' after a call to m_pulldown(): 'm'
may be a stale pointer at this point, and we're interested in whether or
not m_pulldown() failed.
Noticed by: Coverity Prevent analysis tool
Diffstat (limited to 'sys/netinet6/ipcomp_input.c')
| -rw-r--r-- | sys/netinet6/ipcomp_input.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/netinet6/ipcomp_input.c b/sys/netinet6/ipcomp_input.c index cbbf05b721b..038adf1b8f7 100644 --- a/sys/netinet6/ipcomp_input.c +++ b/sys/netinet6/ipcomp_input.c @@ -1,4 +1,4 @@ -/* $NetBSD: ipcomp_input.c,v 1.27 2005/12/11 12:25:02 christos Exp $ */ +/* $NetBSD: ipcomp_input.c,v 1.28 2006/02/14 21:43:02 rpaulo Exp $ */ /* $KAME: ipcomp_input.c,v 1.29 2001/09/04 08:43:19 itojun Exp $ */ /* @@ -35,7 +35,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: ipcomp_input.c,v 1.27 2005/12/11 12:25:02 christos Exp $"); +__KERNEL_RCSID(0, "$NetBSD: ipcomp_input.c,v 1.28 2006/02/14 21:43:02 rpaulo Exp $"); #include "opt_inet.h" #include "opt_ipsec.h" @@ -280,7 +280,7 @@ ipcomp6_input(mp, offp, proto) off = *offp; md = m_pulldown(m, off, sizeof(*ipcomp), NULL); - if (!m) { + if (!md) { m = NULL; /* already freed */ ipseclog((LOG_DEBUG, "IPv6 IPComp input: assumption failed " "(pulldown failure)\n")); |
