diff options
| author | hsu <hsu@FreeBSD.org> | 2003-01-05 07:56:24 +0000 |
|---|---|---|
| committer | hsu <hsu@FreeBSD.org> | 2003-01-05 07:56:24 +0000 |
| commit | aaab488607280c4cf152cb9b5ccca162954d9da2 (patch) | |
| tree | 69f2e7fd34c9d05d08f7f46c872b69f72773a50d /sys/netinet/tcp_syncache.c | |
| parent | 406f1a874f26620453626d27da3c4f53c5839e1a (diff) | |
| download | FreeBSD-src-aaab488607280c4cf152cb9b5ccca162954d9da2.zip FreeBSD-src-aaab488607280c4cf152cb9b5ccca162954d9da2.tar.gz | |
Validate inp before de-referencing it.
Submitted by: pb
Diffstat (limited to 'sys/netinet/tcp_syncache.c')
| -rw-r--r-- | sys/netinet/tcp_syncache.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet/tcp_syncache.c b/sys/netinet/tcp_syncache.c index 550dc52..05660ec 100644 --- a/sys/netinet/tcp_syncache.c +++ b/sys/netinet/tcp_syncache.c @@ -386,7 +386,7 @@ syncache_timer(xslot) inp = sc->sc_tp->t_inpcb; if (slot == SYNCACHE_MAXREXMTS || slot >= tcp_syncache.rexmt_limit || - inp->inp_gencnt != sc->sc_inp_gencnt) { + inp == NULL || inp->inp_gencnt != sc->sc_inp_gencnt) { nsc = TAILQ_NEXT(sc, sc_timerq); syncache_drop(sc, NULL); tcpstat.tcps_sc_stale++; |
