summaryrefslogtreecommitdiffstats
path: root/sys/netinet/tcp_timer.c
diff options
context:
space:
mode:
authorbluhm <bluhm@openbsd.org>2018-01-23 21:06:47 +0000
committerbluhm <bluhm@openbsd.org>2018-01-23 21:06:47 +0000
commitdf55d3151dc9b7f967c800704352190e5b3fd325 (patch)
tree67f14e56030cad7c2156ab65a570a4a945dd0b3e /sys/netinet/tcp_timer.c
parentBring back the PRU_ATTACH constant and description. Then trpt(8) (diff)
downloadwireguard-openbsd-df55d3151dc9b7f967c800704352190e5b3fd325.tar.xz
wireguard-openbsd-df55d3151dc9b7f967c800704352190e5b3fd325.zip
Although it is a dead store here, always reassign the tcpcb after
calling tcp_close(), tcp_drop(), and tcp_disconnect(). Then no freed memory can be used after closing a TCP connection. OK mikeb@ mpi@
Diffstat (limited to 'sys/netinet/tcp_timer.c')
-rw-r--r--sys/netinet/tcp_timer.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet/tcp_timer.c b/sys/netinet/tcp_timer.c
index 1260d14d53e..acacbe7dcf8 100644
--- a/sys/netinet/tcp_timer.c
+++ b/sys/netinet/tcp_timer.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tcp_timer.c,v 1.60 2017/10/29 14:56:36 florian Exp $ */
+/* $OpenBSD: tcp_timer.c,v 1.61 2018/01/23 21:06:47 bluhm Exp $ */
/* $NetBSD: tcp_timer.c,v 1.14 1996/02/13 23:44:09 christos Exp $ */
/*
@@ -218,7 +218,7 @@ tcp_timer_rexmt(void *arg)
if (++tp->t_rxtshift > TCP_MAXRXTSHIFT) {
tp->t_rxtshift = TCP_MAXRXTSHIFT;
tcpstat_inc(tcps_timeoutdrop);
- (void)tcp_drop(tp, tp->t_softerror ?
+ tp = tcp_drop(tp, tp->t_softerror ?
tp->t_softerror : ETIMEDOUT);
goto out;
}