diff options
| author | Lutz Donnerhacke <donner@FreeBSD.org> | 2021-05-15 09:32:57 +0000 |
|---|---|---|
| committer | Lutz Donnerhacke <donner@FreeBSD.org> | 2021-05-16 17:39:51 +0000 |
| commit | 687e510e5ce32fddf46a9dc1d517ccc8a8e25581 (patch) | |
| tree | b76658f0b1440ece9117bf555be835cc205a1cf7 | |
| parent | 8252fe56a0edc95f55b203424a8f2f957959e7a4 (diff) | |
| download | src-687e510e5ce32fddf46a9dc1d517ccc8a8e25581.tar.gz src-687e510e5ce32fddf46a9dc1d517ccc8a8e25581.zip | |
netgraph/ng_checksum: Fix double free error
m_pullup(9) frees the mbuf(9) chain in the case of an allocation error.
The mbuf chain must not be freed again in this case.
PR: 255874
Submitted by: <lylgood@foxmail.com>
Approved by: markj
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D30273
| -rw-r--r-- | sys/netgraph/ng_checksum.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netgraph/ng_checksum.c b/sys/netgraph/ng_checksum.c index 682375c805da..3b542bd86acc 100644 --- a/sys/netgraph/ng_checksum.c +++ b/sys/netgraph/ng_checksum.c @@ -682,9 +682,9 @@ bypass: return (error); done: + NG_FREE_M(m); drop: NG_FREE_ITEM(item); - NG_FREE_M(m); priv->stats.dropped++; |