upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-28 04:12:45 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

tcp rack: fix memory corruption

Browse source 
When in rack_output() jumping to the label out, don't write errno into
the log buffer, since the pointer is not initialized.

Reported by:		Coverity Scan
CID:			1523773
Reviewed by:		rscheff
Sponsored by:		Netflix, Inc.
Differential Revision:	https://reviews.freebsd.org/D44647

(cherry picked from commit d902c8f55b8da6902ab45e67ed756cc99f5a9d5a)
This commit is contained in:
Michael Tuexen 2024-04-06 09:55:46 +02:00
parent 7a019565ff
commit c6770e8c99
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sys/netinet/tcp_stacks/rack.c
View file

@ -22151,12 +22151,12 @@ send:
mtu = inp->inp_route.ro_nh->nh_mtu;
}
#endif /* INET */
out:
if (lgb) {
lgb->tlb_errno = error;
lgb = NULL;
}
out:
/*
* In transmit state, time the transmission and arrange for the
* retransmit. In persist state, just set snd_max.