From 6a674b34222b97056465e7a331a8933563cb4962 Mon Sep 17 00:00:00 2001 From: evgeny Date: Thu, 10 Sep 2026 17:53:14 +0300 Subject: [PATCH] =?UTF-8?q?etcp:=20etcp=5Finflight=5Fnullify=5Flink=20?= =?UTF-8?q?=D1=87=D0=B8=D1=82=D0=B0=D0=BB=20entry->data=20=D0=B2=D0=BC?= =?UTF-8?q?=D0=B5=D1=81=D1=82=D0=BE=20entry=20=E2=80=94=20last=5Flink=20?= =?UTF-8?q?=D0=BD=D0=B5=20=D0=BE=D0=B1=D0=BD=D1=83=D0=BB=D1=8F=D0=BB=D1=81?= =?UTF-8?q?=D1=8F=20(UAF=20=D0=B2=20bbr/retrans)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/transport_layer/etcp_connections.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/transport_layer/etcp_connections.c b/src/transport_layer/etcp_connections.c index baf94242..60cf10f1 100644 --- a/src/transport_layer/etcp_connections.c +++ b/src/transport_layer/etcp_connections.c @@ -951,7 +951,7 @@ static void etcp_inflight_nullify_link(struct ll_queue* q, struct ETCP_LINK* dea if (!q) return; struct ll_entry* entry = q->head; while (entry) { - struct INFLIGHT_PACKET* inf = (struct INFLIGHT_PACKET*)entry->data; + struct INFLIGHT_PACKET* inf = (struct INFLIGHT_PACKET*)entry; if (inf->last_link == dead_link) inf->last_link = NULL; entry = entry->next; }