Module Name:    src
Committed By:   mlelstv
Date:           Sat Feb  7 12:50:25 UTC 2015

Modified Files:
        src/sys/fs/nfs/common: krpc_subr.c

Log Message:
invalidate input mbuf as soon as it is consumed by the mbuf chain
to avoid a double free later.


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 src/sys/fs/nfs/common/krpc_subr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: src/sys/fs/nfs/common/krpc_subr.c
diff -u src/sys/fs/nfs/common/krpc_subr.c:1.2 src/sys/fs/nfs/common/krpc_subr.c:1.3
--- src/sys/fs/nfs/common/krpc_subr.c:1.2	Sat Feb  7 04:06:52 2015
+++ src/sys/fs/nfs/common/krpc_subr.c	Sat Feb  7 12:50:25 2015
@@ -44,7 +44,7 @@
 
 #include <sys/cdefs.h>
 /* __FBSDID("FreeBSD: head/sys/nfs/krpc_subr.c 248207 2013-03-12 13:42:47Z glebius "); */
-__RCSID("$NetBSD: krpc_subr.c,v 1.2 2015/02/07 04:06:52 christos Exp $");
+__RCSID("$NetBSD: krpc_subr.c,v 1.3 2015/02/07 12:50:25 mlelstv Exp $");
 
 #include <sys/param.h>
 #include <sys/systm.h>
@@ -279,6 +279,7 @@ krpc_call(struct sockaddr_in *sa, u_int 
 	 */
 	mhead = m_gethdr(M_WAITOK, MT_DATA);
 	mhead->m_next = *data;
+	*data = NULL;
 	call = mtod(mhead, struct krpc_call *);
 	mhead->m_len = sizeof(*call);
 	bzero((caddr_t)call, sizeof(*call));

Reply via email to