diff options
| author |   claudio <claudio@openbsd.org> | 2017-07-19 07:02:52 +0000 |
|---|---|---|
| committer | claudio <claudio@openbsd.org> | 2017-07-19 07:02:52 +0000 |
| commit | 39200eb47f7dfb64c84a00fac6236037a3b88611 (patch) | |
| tree | 6b9d2ffdee7e7fed11784dbf18748f30737e2266 /usr.bin/ssh/sshkey.c | |
| parent | Fix double free in pppoe_dispatch_disc_pkt(). If m_pulldown() fails m is (diff) | |
| download | wireguard-openbsd-39200eb47f7dfb64c84a00fac6236037a3b88611.tar.xz wireguard-openbsd-39200eb47f7dfb64c84a00fac6236037a3b88611.zip | |
Fix possible double free in the TX dma ring handling. If the allocation of
the cluster fails in vte_init_tx_ring() the mbuf is removed but the slot
in the ring still holds the pointer. A possible call to vte_stop() would
then cause a double free. Again set pointer to NULL to prevent this.
Found by Ilja Van Sprundel
OK bluhm@
Diffstat (limited to 'usr.bin/ssh/sshkey.c')
0 files changed, 0 insertions, 0 deletions