cvs commit: src/sys/netinet tcp_input.c

[Paul Saab]

ps          2005-07-01 22:52:47 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          tcp_input.c 
  Log:
  Fix for a SACK crash caused by a bug in tcp_reass(). tcp_reass()
  does not clear tlen and frees the mbuf (leaving th pointing at
  freed memory), if the data segment is a complete duplicate.
  This change works around that bug. A fix for the tcp_reass() bug
  will appear later (that bug is benign for now, as neither th nor
  tlen is referenced in tcp_input() after the call to tcp_reass()).
  
  Found by:       Pawel Jakub Dawidek.
  Submitted by:   Raja Mukerji, Noritoshi Demizu.
  Approved by:    re
  
  Revision  Changes    Path
  1.279     +3 -1      src/sys/netinet/tcp_input.c