Michael Brown 17f09dfe03 [retry] Fix potential use-after-free in timer_expired() ...

timer->refcnt is allowed to be NULL, in which case the timer's
expired() method may end up freeing the timer object.

Discovered using valgrind.

Signed-off-by: Michael Brown <mcb30@ipxe.org>

2011-07-16 01:49:47 +01:00

..

80211

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

infiniband

[infiniband] Use a one-shot process for CMRC shutdown

2011-06-28 14:45:11 +01:00

tcp

[http] Include port in HTTP Host header as needed

2011-07-15 16:46:58 +01:00

udp

[tftp] Avoid setting current working URI to "tftp://0.0.0.0/"

2011-03-31 04:54:27 +01:00

aoe.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

arp.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

cachedhcp.c

[dhcp] Rename length fields for DHCP options

2011-01-10 03:39:26 +00:00

dhcpopts.c

[settings] Formalise notion of setting applicability

2011-03-22 19:54:58 +00:00

dhcppkt.c

[settings] Formalise notion of setting applicability

2011-03-22 19:54:58 +00:00

eapol.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

eth_slow.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

ethernet.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

fakedhcp.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

fc.c

[fc] Send xfer_window_changed() when FCP link is established

2011-06-28 14:45:07 +01:00

fcels.c

[fc] Use a one-shot process for Fibre Channel ELS requests

2011-06-28 14:45:10 +01:00

fcns.c

[fc] Use a one-shot process for Fibre Channel name server queries

2011-06-28 14:45:10 +01:00

fcoe.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

fcp.c

[process] Pass containing object pointer to process step() methods

2011-06-28 14:45:08 +01:00

icmp.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

icmpv6.c

[build] Fix misaligned table entries when using gcc 4.5

2010-08-20 10:13:04 +01:00

infiniband.c

[process] Pass containing object pointer to process step() methods

2011-06-28 14:45:08 +01:00

iobpad.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

ipv4.c

[ipv4] Use broadcast link-layer address for all broadcast IPv4 addresses

2011-07-15 19:21:07 +01:00

ipv6.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

mii.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

ndp.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

netdev_settings.c

[settings] Impose a fixed order on settings

2011-03-23 11:57:29 +00:00

netdevice.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

nullnet.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

rarp.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00

retry.c

[retry] Fix potential use-after-free in timer_expired()

2011-07-16 01:49:47 +01:00

tcp.c

[tcp] Send xfer_window_changed() when window opens

2011-06-28 14:45:08 +01:00

tcpip.c

[build] Rename gPXE to iPXE

2010-04-19 23:43:39 +01:00

tls.c

[tls] Eliminate polling while TX state machine is idle

2011-06-28 14:45:12 +01:00

udp.c

[udp] Use MAX_LL_NET_HEADER_LEN instead of defining our own UDP_MAX_HLEN

2010-11-19 16:08:05 +00:00

vlan.c

[netdevice] Allow link layer to report broadcast/multicast packets via pull()

2011-07-15 18:48:46 +01:00