Re: 2.0.29 Oops - NULL deref in ip_defrag

Michael Lausch (mla@gams.co.at)
Tue, 08 Apr 1997 17:38:01 +0200

>>>>> "bl" == Benjamin C R LaHaise <blah@dot.superaje.com>
>>>>> wrote the following on Sat, 5 Apr 1997 00:00:47 +0000 ( )

bl> This cropped up a number of days ago on one of our
bl> machines... Looks like the following line in
bl> net/ipv4/ip_fragment.c:570 executed with tfp=NULL

bl> if (tfp->next != NULL)
bl> tmp-> next->prev = tmp->prev;

the bug has benn fixed somewhere in the 2.1 series. Change the
if (tfp->next != NULL)
into
if (tmp->next != NULL)

This bug also bit me when one of our ethernet hubs failed and the
ethernet error on our NFS server raised.

bl> -benjamin

[deleted]

---
Michael Lausch/g.a.m.s. edv dienstleistungen gmbh
See my web page or query PGP key server for PGP key
<http://www.gams.net/~mla>