diff options
| author | markj <markj@FreeBSD.org> | 2016-03-02 05:04:04 +0000 |
|---|---|---|
| committer | markj <markj@FreeBSD.org> | 2016-03-02 05:04:04 +0000 |
| commit | 33b572c3379931cdf4c3cc9b7dfadbb894c3024b (patch) | |
| tree | 3e18ccb42bf76ae4a0fa4d4fdf72e8d29804a706 /sys/netipsec | |
| parent | a7d656306201b95b51e256e41aae700ca72b7a6d (diff) | |
| download | FreeBSD-src-33b572c3379931cdf4c3cc9b7dfadbb894c3024b.zip FreeBSD-src-33b572c3379931cdf4c3cc9b7dfadbb894c3024b.tar.gz | |
Set tres to NULL to avoid a double free if the m_pullup() below fails.
Reviewed by: glebius
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D5497
Diffstat (limited to 'sys/netipsec')
| -rw-r--r-- | sys/netipsec/key.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c index 85b6e79..ff580c7 100644 --- a/sys/netipsec/key.c +++ b/sys/netipsec/key.c @@ -3490,6 +3490,7 @@ key_setdumpsa(struct secasvar *sav, u_int8_t type, u_int8_t satype, } m_cat(result, tres); + tres = NULL; if (result->m_len < sizeof(struct sadb_msg)) { result = m_pullup(result, sizeof(struct sadb_msg)); if (result == NULL) |
