diff options
| author |   claudio <claudio@openbsd.org> | 2010-07-15 09:45:09 +0000 |
|---|---|---|
| committer | claudio <claudio@openbsd.org> | 2010-07-15 09:45:09 +0000 |
| commit | 8f59d4a41be8276d6074decd35b27b16a35429ac (patch) | |
| tree | cf3aec623de483f7f8d03c6d0d8673cef4a42217 /lib/libc | |
| parent | * Comment poll support in conf.h (diff) | |
| download | wireguard-openbsd-8f59d4a41be8276d6074decd35b27b16a35429ac.tar.xz wireguard-openbsd-8f59d4a41be8276d6074decd35b27b16a35429ac.zip | |
m_getptr(m, 0, ...) may return an mbuf different from m -- if m has no
data in it. m_getptr() hops over empty buffers and points to the first
allocated data byte. Because of this the m_dup_pkthdr() call done by
m_copym0() can panic because not the first mbuf is passed.
Found the hard way by myself, diff by blambert@ commiitting for him since
he is not around. Tested and OK myself
Diffstat (limited to 'lib/libc')
0 files changed, 0 insertions, 0 deletions