From: David Laight <david@l8s.co.uk> > > + m = m_pullup(m, m->m_len); > > + if (m == NULL) > > + goto drop; > <snip> > > +drop: > > + m_freem(m); > > you want to free the original 'm' which you have carefully > lost! - if m_pullup fails, it frees "original m". - m_freem(0) is safe. am i missing something? --- YAMAMOTO Takashi<yamt@mwd.biglobe.ne.jp>