From a08da7cd98bf2aff1c327d1becbb7614c27a40b4 Mon Sep 17 00:00:00 2001 From: andre Date: Wed, 18 Jan 2006 14:24:39 +0000 Subject: Return mbuf pointer or NULL from ip_fastforward() as the mbuf pointer may have changed by m_pullup() during fastforward processing. While this is a bug it is actually never triggered in real world situations and it is not remotely exploitable. Found by: Coverity Prevent(tm) Coverity ID: CID780 Sponsored by: TCP/IP Optimization Fundraise 2005 --- sys/netinet/in_var.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/netinet/in_var.h') diff --git a/sys/netinet/in_var.h b/sys/netinet/in_var.h index 5792a0b..319b0dc 100644 --- a/sys/netinet/in_var.h +++ b/sys/netinet/in_var.h @@ -242,7 +242,7 @@ void in_rtqdrain(void); void ip_input(struct mbuf *); int in_ifadown(struct ifaddr *ifa, int); void in_ifscrub(struct ifnet *, struct in_ifaddr *); -int ip_fastforward(struct mbuf *); +struct mbuf *ip_fastforward(struct mbuf *); #endif /* _KERNEL */ -- cgit v1.1