svn commit: r330772 - head/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Sun Mar 11 18:10:59 2018
New Revision: 330772
URL: https://svnweb.freebsd.org/changeset/base/330772

Log:
  Check that we have PF_KEY sockets before iterating over all RAW sockets.
  
  MFC after:	2 weeks

Modified:
  head/sys/netipsec/keysock.c

Modified: head/sys/netipsec/keysock.c
==============================================================================
--- head/sys/netipsec/keysock.c	Sun Mar 11 18:03:55 2018	(r330771)
+++ head/sys/netipsec/keysock.c	Sun Mar 11 18:10:59 2018	(r330772)
@@ -202,6 +202,11 @@ key_sendup_mbuf(struct socket *so, struct mbuf *m, int
 		PFKEYSTAT_INC(in_msgtype[msg->sadb_msg_type]);
 	}
 	mtx_lock(&rawcb_mtx);
+	if (V_key_cb.any_count == 0) {
+		mtx_unlock(&rawcb_mtx);
+		m_freem(m);
+		return (0);
+	}
 	LIST_FOREACH(rp, &V_rawcb_list, list)
 	{
 		if (rp->rcb_proto.sp_family != PF_KEY)