From 5af12afca00d140627c2c89b51b429ecd28b4bbd Mon Sep 17 00:00:00 2001
From: provos <provos@openbsd.org>
Date: Thu, 27 Apr 2000 20:53:08 +0000
Subject: mbuf is freed by sbappend(), move the references to th up. found by
 art@

---
 sys/netinet/tcp_input.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'sys/netinet/tcp_input.c')

diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c
index c5663d4dce3..1138982f3d9 100644
--- a/sys/netinet/tcp_input.c
+++ b/sys/netinet/tcp_input.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: tcp_input.c,v 1.58 2000/04/14 04:20:57 itojun Exp $	*/
+/*	$OpenBSD: tcp_input.c,v 1.59 2000/04/27 20:53:08 provos Exp $	*/
 /*	$NetBSD: tcp_input.c,v 1.23 1996/02/13 23:43:44 christos Exp $	*/
 
 /*
@@ -894,12 +894,12 @@ findpcb:
 			 * to socket buffer.
 			 */
 			m_adj(m, iphlen + off);
-			sbappend(&so->so_rcv, m);
-			sorwakeup(so);
 			if (th->th_flags & TH_PUSH)
 				tp->t_flags |= TF_ACKNOW;
 			else
 				tp->t_flags |= TF_DELACK;
+			sbappend(&so->so_rcv, m);
+			sorwakeup(so);
 			return;
 		}
 	}
-- 
cgit v1.2.3-59-g8ed1b