svn commit: r353034 - stable/12/sys/netinet

Michael Tuexen tuexen at FreeBSD.org
Thu Oct 3 10:37:54 UTC 2019


Author: tuexen
Date: Thu Oct  3 10:37:53 2019
New Revision: 353034
URL: https://svnweb.freebsd.org/changeset/base/353034

Log:
  MFC r352652:
  
  Plumb a memory leak.
  Thnanks to Felix Weinrank for finding this issue using fuzz testing
  and reporting it for the userland stack:
  https://github.com/sctplab/usrsctp/issues/378

Modified:
  stable/12/sys/netinet/sctp_indata.c
Directory Properties:
  stable/12/   (props changed)

Modified: stable/12/sys/netinet/sctp_indata.c
==============================================================================
--- stable/12/sys/netinet/sctp_indata.c	Thu Oct  3 08:25:09 2019	(r353033)
+++ stable/12/sys/netinet/sctp_indata.c	Thu Oct  3 10:37:53 2019	(r353034)
@@ -472,6 +472,11 @@ sctp_clean_up_control(struct sctp_tcb *stcb, struct sc
 		chk->data = NULL;
 		sctp_free_a_chunk(stcb, chk, SCTP_SO_NOT_LOCKED);
 	}
+	sctp_free_remote_addr(control->whoFrom);
+	if (control->data) {
+		sctp_m_freem(control->data);
+		control->data = NULL;
+	}
 	sctp_free_a_readq(stcb, control);
 }
 


More information about the svn-src-all mailing list