svn commit: r280707 - stable/9/sys/netinet6

[Andrey V. Elsukov]

Author: ae
Date: Thu Mar 26 18:51:00 2015
New Revision: 280707
URL: https://svnweb.freebsd.org/changeset/base/280707

Log:
  MFC r280236:
    To avoid a possible race, release the reference to ifa after return
    from nd6_dad_na_input().

Modified:
  stable/9/sys/netinet6/nd6_nbr.c
Directory Properties:
  stable/9/sys/   (props changed)

Modified: stable/9/sys/netinet6/nd6_nbr.c
==============================================================================
--- stable/9/sys/netinet6/nd6_nbr.c	Thu Mar 26 18:45:51 2015	(r280706)
+++ stable/9/sys/netinet6/nd6_nbr.c	Thu Mar 26 18:51:00 2015	(r280707)
@@ -696,8 +696,8 @@ nd6_na_input(struct mbuf *m, int off, in
 	 */
 	if (ifa
 	 && (((struct in6_ifaddr *)ifa)->ia6_flags & IN6_IFF_TENTATIVE)) {
-		ifa_free(ifa);
 		nd6_dad_na_input(ifa);
+		ifa_free(ifa);
 		goto freeit;
 	}