CVSROOT: /cvs Module name: src Changes by: [email protected] 2016/02/08 14:57:46
Modified files:
sys/netinet : Tag: OPENBSD_5_8 ip_carp.c
Log message:
Carp in OpenBSD 5.8 is affected by the same bug as vlan. By creating,
changing and destroying carp interfaces multiple times, root could
crash the OpenBSD 5.8 kernel with ifconfig. The reference counting
of carp_ifih in carp_set_ifp() was wrong, so a use after free was
possible. Reordering the operations fixes it.
>From markus@; OK mpi@
