created | 2019-10-05T13:55:21Z |
---|---|
begin | 2019-09-04T15:00:00Z |
end | 2019-09-04T18:00:00Z |
path | src/sys |
commits | 3 |
date | 2019-09-04T16:11:58Z | |||
---|---|---|---|---|
author | bluhm | |||
files | src/sys/netinet6/ip6_mroute.c | log | diff | annotate |
message |
Fix a route use after free in IPv6 multicast route. Move the mrt6_mcast6_del() out of the rtable_walk(). This avoids recursion to prevent stack overflow. Also it allows freeing the route outside of the walk. Now mrt6_mcast_del() frees the route only when it is deleted from the routing table. If that fails, it must not be freed. After the route is returned by mf6c_find(), it is reference counted. Then we need a rtfree(), but not in the other case. Name mrt6_mcast_add() and mrt6_mcast_del() consistently. Move rt_timer_remove_all() into mrt6_mcast_del(). Reported-by: [email protected] OK mpi@ |
date | 2019-09-04T16:13:49Z | |||
---|---|---|---|---|
author | bluhm | |||
files | src/sys/netinet6/ip6_mroute.c | log | diff | annotate |
message | Add RCS Id. |
date | 2019-09-04T17:15:56Z | |||
---|---|---|---|---|
author | krw | |||
files | src/sys/scsi/st.c | log | diff | annotate |
message |
The great density mode purge of 2006 (r1.62) was never carried through to a logical conclusion. Start cleaning up the left overs. First, delete the unused quirk ST_Q_BLKSIZE and simplify the one condition referencing it in light of the fact that !ST_Q_BLKSIZE would always be true. |