diff options
| author | truckman <truckman@FreeBSD.org> | 1999-05-10 18:09:39 +0000 |
|---|---|---|
| committer | truckman <truckman@FreeBSD.org> | 1999-05-10 18:09:39 +0000 |
| commit | df85d5a50f44492d3f123eee0ac0304369471e85 (patch) | |
| tree | 36730c3418fab9665679cea839e9759000454975 /sys/dev/snp | |
| parent | 15ee2ac7e1808c386d8fedf7b3512e8b9d6f8c4d (diff) | |
| download | FreeBSD-src-df85d5a50f44492d3f123eee0ac0304369471e85.zip FreeBSD-src-df85d5a50f44492d3f123eee0ac0304369471e85.tar.gz | |
Fix descriptor leak provoked by KKIS.05051999.003b exploit code.
unp_internalize() takes a reference to the descriptor. If the send
fails after unp_internalize(), the control mbuf would be freed ophaning
the reference.
Tested in -CURRENT by: Pierre Beyssac <beyssac@enst.fr>
Diffstat (limited to 'sys/dev/snp')
0 files changed, 0 insertions, 0 deletions
