From f5c70f34c65ef219cec93966edfe9150b27b3de3 Mon Sep 17 00:00:00 2001 From: christos Date: Sun, 23 Apr 2017 19:09:29 +0000 Subject: [PATCH] Free the right fragment (Cy Schubert @ FreeBSD). This will cause use after free issues and eventually panic. --- sys/external/bsd/ipf/netinet/ip_frag.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sys/external/bsd/ipf/netinet/ip_frag.c b/sys/external/bsd/ipf/netinet/ip_frag.c index c8a4f7704695..2a4c97b98b46 100644 --- a/sys/external/bsd/ipf/netinet/ip_frag.c +++ b/sys/external/bsd/ipf/netinet/ip_frag.c @@ -1,4 +1,4 @@ -/* $NetBSD: ip_frag.c,v 1.4 2017/01/13 15:17:00 christos Exp $ */ +/* $NetBSD: ip_frag.c,v 1.5 2017/04/23 19:09:29 christos Exp $ */ /* * Copyright (C) 2012 by Darren Reed. @@ -87,7 +87,7 @@ struct file; #if !defined(lint) #if defined(__NetBSD__) #include -__KERNEL_RCSID(0, "$NetBSD: ip_frag.c,v 1.4 2017/01/13 15:17:00 christos Exp $"); +__KERNEL_RCSID(0, "$NetBSD: ip_frag.c,v 1.5 2017/04/23 19:09:29 christos Exp $"); #else static const char sccsid[] = "@(#)ip_frag.c 1.11 3/24/96 (C) 1993-2000 Darren Reed"; static const char rcsid[] = "@(#)Id: ip_frag.c,v 1.1.1.2 2012/07/22 13:45:17 darrenr Exp"; @@ -468,7 +468,7 @@ ipfr_frag_new( IPFR_CMPSZ)) { RWLOCK_EXIT(lock); FBUMPD(ifs_exists); - KFREE(fra); + KFREE(fran); return NULL; }