HomeFreeBSD

Fix a double-free when an inp transitions to INP_TIMEWAIT state

Description

Fix a double-free when an inp transitions to INP_TIMEWAIT state
after having been dropped.

This fixes enforces in_pcbdrop() logic in tcp_input():

"in_pcbdrop() is used by TCP to mark an inpcb as unused and avoid future packet
delivery or event notification when a socket remains open but TCP has closed."

PR: 203175
Reported by: Palle Girgensohn, Slawa Olhovchenkov
Tested by: Slawa Olhovchenkov
Reviewed by: Slawa Olhovchenkov
Approved by: gnn, Slawa Olhovchenkov
Differential Revision: https://reviews.freebsd.org/D8211
MFC after: 1 week
Sponsored by: Verisign, inc

Details

Provenance
jchAuthored on Oct 18 2016, 7:16 AM
Parents
rGc30dcf40ba7e: Add a new flag to mkimg (-a num) to specify the active partition for
Branches
Unknown
Tags
Unknown