From 6da2beab7f95422c9010755a8330c9551705260e Mon Sep 17 00:00:00 2001 From: rwatson Date: Sun, 20 Jun 2004 20:17:29 +0000 Subject: Assert the inpcb lock before letting MAC check whether we can deliver to the inpcb in tcp_input(). --- sys/netinet/tcp_input.c | 1 + sys/netinet/tcp_reass.c | 1 + 2 files changed, 2 insertions(+) (limited to 'sys/netinet') diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c index 9b6636b..b1b2284 100644 --- a/sys/netinet/tcp_input.c +++ b/sys/netinet/tcp_input.c @@ -750,6 +750,7 @@ findpcb: tiwin = th->th_win; #ifdef MAC + INP_LOCK_ASSERT(inp); if (mac_check_inpcb_deliver(inp, m)) goto drop; #endif diff --git a/sys/netinet/tcp_reass.c b/sys/netinet/tcp_reass.c index 9b6636b..b1b2284 100644 --- a/sys/netinet/tcp_reass.c +++ b/sys/netinet/tcp_reass.c @@ -750,6 +750,7 @@ findpcb: tiwin = th->th_win; #ifdef MAC + INP_LOCK_ASSERT(inp); if (mac_check_inpcb_deliver(inp, m)) goto drop; #endif -- cgit v1.1