Module Name: src Committed By: mlelstv Date: Sat Feb 7 12:50:25 UTC 2015
Modified Files: src/sys/fs/nfs/common: krpc_subr.c Log Message: invalidate input mbuf as soon as it is consumed by the mbuf chain to avoid a double free later. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/sys/fs/nfs/common/krpc_subr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/sys/fs/nfs/common/krpc_subr.c diff -u src/sys/fs/nfs/common/krpc_subr.c:1.2 src/sys/fs/nfs/common/krpc_subr.c:1.3 --- src/sys/fs/nfs/common/krpc_subr.c:1.2 Sat Feb 7 04:06:52 2015 +++ src/sys/fs/nfs/common/krpc_subr.c Sat Feb 7 12:50:25 2015 @@ -44,7 +44,7 @@ #include <sys/cdefs.h> /* __FBSDID("FreeBSD: head/sys/nfs/krpc_subr.c 248207 2013-03-12 13:42:47Z glebius "); */ -__RCSID("$NetBSD: krpc_subr.c,v 1.2 2015/02/07 04:06:52 christos Exp $"); +__RCSID("$NetBSD: krpc_subr.c,v 1.3 2015/02/07 12:50:25 mlelstv Exp $"); #include <sys/param.h> #include <sys/systm.h> @@ -279,6 +279,7 @@ krpc_call(struct sockaddr_in *sa, u_int */ mhead = m_gethdr(M_WAITOK, MT_DATA); mhead->m_next = *data; + *data = NULL; call = mtod(mhead, struct krpc_call *); mhead->m_len = sizeof(*call); bzero((caddr_t)call, sizeof(*call));