diff options
| author | ae <ae@FreeBSD.org> | 2015-03-06 05:50:39 +0000 |
|---|---|---|
| committer | ae <ae@FreeBSD.org> | 2015-03-06 05:50:39 +0000 |
| commit | 3169d96832fc12e9f0c5896400304a6d54bb6ee0 (patch) | |
| tree | 699ca45f3be0a318253900b84e9f0d85de0c8b74 | |
| parent | eedd9cfb168e66c70a752c1c3711f7a2e8d47e6c (diff) | |
| download | FreeBSD-src-3169d96832fc12e9f0c5896400304a6d54bb6ee0.zip FreeBSD-src-3169d96832fc12e9f0c5896400304a6d54bb6ee0.tar.gz | |
tcp6_ctlinput() doesn't pass MTU value to in6_pcbnotify().
Check cmdarg isn't NULL before dereference, this check was in the
ip6_notify_pmtu() before r279588.
Reported by: Florian Smeets
MFC after: 1 week
| -rw-r--r-- | sys/netinet6/in6_pcb.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet6/in6_pcb.c b/sys/netinet6/in6_pcb.c index 7296ae6..10cd3f2 100644 --- a/sys/netinet6/in6_pcb.c +++ b/sys/netinet6/in6_pcb.c @@ -645,7 +645,7 @@ in6_pcbnotify(struct inpcbinfo *pcbinfo, struct sockaddr *dst, * know the value, notify. * XXX: should we avoid to notify the value to TCP sockets? */ - if (cmd == PRC_MSGSIZE) + if (cmd == PRC_MSGSIZE && cmdarg != NULL) ip6_notify_pmtu(inp, (struct sockaddr_in6 *)dst, *(u_int32_t *)cmdarg); |
