PR/47591 CVS commit: [netbsd-6-0] src/sys/kern

["Manuel Bouyer" <bouyer%netbsd.org@localhost>]

The following reply was made to PR kern/47591; it has been noted by GNATS.

From: "Manuel Bouyer" <bouyer%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/47591 CVS commit: [netbsd-6-0] src/sys/kern
Date: Sat, 14 Dec 2013 19:37:02 +0000

 Module Name:   src
 Committed By:  bouyer
 Date:          Sat Dec 14 19:37:02 UTC 2013
 
 Modified Files:
        src/sys/kern [netbsd-6-0]: uipc_syscalls.c
 
 Log Message:
 Pull up following revision(s) (requested by spz in ticket #996):
        sys/kern/uipc_syscalls.c: revision 1.163
 PR/47591: Michael Plass: If the unix socket is closed before accept,
 unp->unp_conn will be NULL in PRU_ACCEPT, as called from
 sys_accept->so_accept. This will cause the usrreq to return with
 no error, leaving the mbuf gotten from m_get() with an uninitialized
 length, containing junk from a previous call. Initialize m_len to
 be 0 to handle this case. This is yet another reason why Beverly's
 idea of setting m_len = 0 in m_get() makes a lot of sense. Arguably
 this could be an error, since the data we return now has 0 family
 and length.
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.154.2.1.4.1 -r1.154.2.1.4.2 src/sys/kern/uipc_syscalls.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.