diff options
| author | ps <ps@FreeBSD.org> | 2005-07-01 22:52:46 +0000 |
|---|---|---|
| committer | ps <ps@FreeBSD.org> | 2005-07-01 22:52:46 +0000 |
| commit | 513734e2faf1e33963e9b5cf0c68d8398ed8de37 (patch) | |
| tree | 3b57983fa8f90c9a1801514a42c596acdfa28c16 /sys/netinet/tcp_timewait.c | |
| parent | 0b830ea12be133ca1a4a16f6c52a06a8f82cf22e (diff) | |
| download | FreeBSD-src-513734e2faf1e33963e9b5cf0c68d8398ed8de37.zip FreeBSD-src-513734e2faf1e33963e9b5cf0c68d8398ed8de37.tar.gz | |
Fix for a SACK crash caused by a bug in tcp_reass(). tcp_reass()
does not clear tlen and frees the mbuf (leaving th pointing at
freed memory), if the data segment is a complete duplicate.
This change works around that bug. A fix for the tcp_reass() bug
will appear later (that bug is benign for now, as neither th nor
tlen is referenced in tcp_input() after the call to tcp_reass()).
Found by: Pawel Jakub Dawidek.
Submitted by: Raja Mukerji, Noritoshi Demizu.
Approved by: re
Diffstat (limited to 'sys/netinet/tcp_timewait.c')
0 files changed, 0 insertions, 0 deletions
