svn commit: r303768 - stable/11/sys/netinet6

[Andrey V. Elsukov]

Author: ae
Date: Fri Aug  5 15:12:29 2016
New Revision: 303768
URL: https://svnweb.freebsd.org/changeset/base/303768

Log:
  MFC r303657:
    Fix NULL pointer dereference.
    ro pointer can be NULL when IPSec consumes mbuf.
  
    PR:		211486
  Approved by:	re (gjb)

Modified:
  stable/11/sys/netinet6/ip6_output.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netinet6/ip6_output.c
==============================================================================
--- stable/11/sys/netinet6/ip6_output.c	Fri Aug  5 13:53:28 2016	(r303767)
+++ stable/11/sys/netinet6/ip6_output.c	Fri Aug  5 15:12:29 2016	(r303768)
@@ -1057,7 +1057,8 @@ done:
 	 * Release the route if using our private route, or if
 	 * (with flowtable) we don't have our own reference.
 	 */
-	if (ro == &ip6route || ro->ro_flags & RT_NORTREF)
+	if (ro == &ip6route ||
+	    (ro != NULL && ro->ro_flags & RT_NORTREF))
 		RO_RTFREE(ro);
 	return (error);