diff options
| author | jhb <jhb@FreeBSD.org> | 2014-05-17 02:45:04 +0000 |
|---|---|---|
| committer | jhb <jhb@FreeBSD.org> | 2014-05-17 02:45:04 +0000 |
| commit | dbc239a5a7085beffc050837662f718c49937994 (patch) | |
| tree | d57db162a55ec8773ae475c22cd8365f743bf8e0 /sys/dev/aac | |
| parent | 3d089b2d54111d9bcae30a24b70a2321b8ee79fe (diff) | |
| download | FreeBSD-src-dbc239a5a7085beffc050837662f718c49937994.zip FreeBSD-src-dbc239a5a7085beffc050837662f718c49937994.tar.gz | |
Clear the data buffer length field when freeing a command structure so that
it doesn't leak through when the command structure is reused for a user
command without a data buffer.
PR: amd64/189668
Tested by: Pete Long <pete@nrth.org>
MFC after: 1 week
Diffstat (limited to 'sys/dev/aac')
| -rw-r--r-- | sys/dev/aac/aac.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/dev/aac/aac.c b/sys/dev/aac/aac.c index c0f11f9..3ea964f 100644 --- a/sys/dev/aac/aac.c +++ b/sys/dev/aac/aac.c @@ -1408,6 +1408,7 @@ aac_release_command(struct aac_command *cm) fwprintf(sc, HBA_FLAGS_DBG_FUNCTION_ENTRY_B, ""); /* (re)initialize the command/FIB */ + cm->cm_datalen = 0; cm->cm_sgtable = NULL; cm->cm_flags = 0; cm->cm_complete = NULL; |
