From owner-cvs-all  Thu Feb  8 15: 0:43 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 383B037B6B6; Thu,  8 Feb 2001 15:00:25 -0800 (PST)
Received: (from luigi@localhost)
	by freefall.freebsd.org (8.11.1/8.11.1) id f18N0PJ33884;
	Thu, 8 Feb 2001 15:00:25 -0800 (PST)
	(envelope-from luigi)
Message-Id: <200102082300.f18N0PJ33884@freefall.freebsd.org>
From: Luigi Rizzo <luigi@FreeBSD.org>
Date: Thu, 8 Feb 2001 15:00:25 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/dev/ed if_ed.c
X-FreeBSD-CVS-Branch: RELENG_4
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

luigi       2001/02/08 15:00:24 PST

  Modified files:        (Branch: RELENG_4)
    sys/dev/ed           if_ed.c 
  Log:
  MFC: fix a serious bug in the ed driver when very short packets are
  received (with bpf or bridging active). Some code was erroneously
  assuming that the packet contained at least the ethernet header,
  and as a result a negative length was later written into the mbuf
  header, eventually resulting in random panics.
  
  This bug has been reported for some time, but i was never able to
  reproduce it locally because I had the code fixed in my sources
  a couple of weeks ago, and just forgot to commit the fix.
  
  Revision    Changes    Path
  1.173.2.10  +12 -6     src/sys/dev/ed/if_ed.c



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message