From 173ef4db9740ebfb9354f9d7fb956680520f0b62 Mon Sep 17 00:00:00 2001 From: andre Date: Tue, 9 Nov 2004 09:40:32 +0000 Subject: Fix a double-free in the 'hlen > m->m_len' sanity check. Bug report by: MFC after: 2 weeks --- sys/netinet/ip_fastfwd.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/netinet') diff --git a/sys/netinet/ip_fastfwd.c b/sys/netinet/ip_fastfwd.c index f0add29..4acb594 100644 --- a/sys/netinet/ip_fastfwd.c +++ b/sys/netinet/ip_fastfwd.c @@ -221,7 +221,7 @@ ip_fastforward(struct mbuf *m) if (hlen > m->m_len) { if ((m = m_pullup(m, hlen)) == 0) { ipstat.ips_badhlen++; - goto drop; + return 1; } ip = mtod(m, struct ip *); } -- cgit v1.1