From e68bf7df89ab1ca8350fadf2e81c907eaed56c6e Mon Sep 17 00:00:00 2001 From: rwatson Date: Fri, 13 Jan 2006 23:53:23 +0000 Subject: In ipcomp6_input(), check 'md' not 'm' after a call to m_pulldown(): 'm' may be a stale pointer at this point, and we're interested in whether or not m_pulldown() failed. Noticed by: Coverity Prevent analysis tool MFC after: 3 days --- sys/netinet6/ipcomp_input.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/netinet6') diff --git a/sys/netinet6/ipcomp_input.c b/sys/netinet6/ipcomp_input.c index 1831648..be97fd1 100644 --- a/sys/netinet6/ipcomp_input.c +++ b/sys/netinet6/ipcomp_input.c @@ -258,7 +258,7 @@ ipcomp6_input(mp, offp, proto) off = *offp; md = m_pulldown(m, off, sizeof(*ipcomp), NULL); - if (!m) { + if (!md) { m = NULL; /* already freed */ ipseclog((LOG_DEBUG, "IPv6 IPComp input: assumption failed " "(pulldown failure)\n")); -- cgit v1.1