PR/47591 CVS commit: [netbsd-6] src/sys/kern

["Manuel Bouyer" <bouyer%netbsd.org@localhost>]

The following reply was made to PR kern/47591; it has been noted by GNATS.

From: "Manuel Bouyer" <bouyer%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/47591 CVS commit: [netbsd-6] src/sys/kern
Date: Sat, 14 Dec 2013 19:36:33 +0000

 Module Name:   src
 Committed By:  bouyer
 Date:          Sat Dec 14 19:36:33 UTC 2013
 
 Modified Files:
        src/sys/kern [netbsd-6]: uipc_syscalls.c
 
 Log Message:
 Pull up following revision(s) (requested by spz in ticket #996):
        sys/kern/uipc_syscalls.c: revision 1.163
 PR/47591: Michael Plass: If the unix socket is closed before accept,
 unp->unp_conn will be NULL in PRU_ACCEPT, as called from
 sys_accept->so_accept. This will cause the usrreq to return with
 no error, leaving the mbuf gotten from m_get() with an uninitialized
 length, containing junk from a previous call. Initialize m_len to
 be 0 to handle this case. This is yet another reason why Beverly's
 idea of setting m_len = 0 in m_get() makes a lot of sense. Arguably
 this could be an error, since the data we return now has 0 family
 and length.
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.154.2.4 -r1.154.2.5 src/sys/kern/uipc_syscalls.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.