diff options
author | rrs <rrs@FreeBSD.org> | 2007-05-30 17:39:45 +0000 |
---|---|---|
committer | rrs <rrs@FreeBSD.org> | 2007-05-30 17:39:45 +0000 |
commit | 00ab510c7cabe5ff0ee618e3e6b7f48fdf9cdbfa (patch) | |
tree | 88cefe357ba00902c5e5d6c978baeaf9a7205cf6 /sys/netinet/sctp_indata.c | |
parent | ef5ebf1aa24d4addf10e9ed210cffc0459d3ff10 (diff) | |
download | FreeBSD-src-00ab510c7cabe5ff0ee618e3e6b7f48fdf9cdbfa.zip FreeBSD-src-00ab510c7cabe5ff0ee618e3e6b7f48fdf9cdbfa.tar.gz |
- Fix a memory overwrite when the mapping array
is expanded, size of expansion was not taken int consideration.
- Fix so vtag hash is 1 bigger so that it modulo's out
correctly, avoids a panic when restart with right modulo happens.
- do not dereference stcb when control->do_not_ref_stcb is set
- Fix up packet logging to not often use a lock and also to
add to options.
- Fix some logging option duplication in the sctputil.h
Diffstat (limited to 'sys/netinet/sctp_indata.c')
-rw-r--r-- | sys/netinet/sctp_indata.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet/sctp_indata.c b/sys/netinet/sctp_indata.c index 0635d87..a55720d 100644 --- a/sys/netinet/sctp_indata.c +++ b/sys/netinet/sctp_indata.c @@ -1482,7 +1482,7 @@ sctp_process_a_data_chunk(struct sctp_tcb *stcb, struct sctp_association *asoc, } if (gap >= (uint32_t) (asoc->mapping_array_size << 3)) { SCTP_TCB_LOCK_ASSERT(stcb); - if (sctp_expand_mapping_array(asoc)) { + if (sctp_expand_mapping_array(asoc, gap)) { /* Can't expand, drop it */ return (0); } |