diff options
| author | Andrey V. Elsukov <ae@FreeBSD.org> | 2016-08-02 12:18:06 +0000 |
|---|---|---|
| committer | Andrey V. Elsukov <ae@FreeBSD.org> | 2016-08-02 12:18:06 +0000 |
| commit | 723758b7ce99f88833ad313418c47a1e29f26f00 (patch) | |
| tree | 054cdde83f38659c39d3bdfe817afc4580ba1fe4 /sys/netinet6 | |
| parent | 05cde7efa660ada01c90883b32e993fd927fe574 (diff) | |
| download | src-723758b7ce99f88833ad313418c47a1e29f26f00.tar.gz src-723758b7ce99f88833ad313418c47a1e29f26f00.zip | |
Fix NULL pointer dereference.
ro pointer can be NULL when IPSec consumes mbuf.
PR: 211486
MFC after: 3 days
Notes
Notes:
svn path=/head/; revision=303657
Diffstat (limited to 'sys/netinet6')
| -rw-r--r-- | sys/netinet6/ip6_output.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/netinet6/ip6_output.c b/sys/netinet6/ip6_output.c index a393cb51aaac..f31679e3bd9f 100644 --- a/sys/netinet6/ip6_output.c +++ b/sys/netinet6/ip6_output.c @@ -1058,7 +1058,8 @@ done: * Release the route if using our private route, or if * (with flowtable) we don't have our own reference. */ - if (ro == &ip6route || ro->ro_flags & RT_NORTREF) + if (ro == &ip6route || + (ro != NULL && ro->ro_flags & RT_NORTREF)) RO_RTFREE(ro); return (error); |