Ref only the head of a pbuf chain, instead of the whole thing, to avoid leaking pbufs.

diff --git a/net/3c90x.c b/net/3c90x.c
index 7b6a72eca0d136c020ce29b0ec7eea873b940cef..d405352ebe4b7ba08ce3fde870ef9abdadcead49 100644 (file)
--- a/net/3c90x.c
+++ b/net/3c90x.c
@@ -432,12 +432,12 @@ static void _transmit(struct nic *_nic, struct pbuf *p)
        len = 0;
        n = 0;
        txpbufs[txprod] = p;
        len = 0;
        n = 0;
        txpbufs[txprod] = p;

+       pbuf_ref(p);

        for (; p; p = p->next)
        {
                txdescs[txprod].segments[n].addr = v2p(p->payload);
                txdescs[txprod].segments[n].len = p->len | (p->next ? 0 : (1 << 31));
                len += p->len;
        for (; p; p = p->next)
        {
                txdescs[txprod].segments[n].addr = v2p(p->payload);
                txdescs[txprod].segments[n].len = p->len | (p->next ? 0 : (1 << 31));
                len += p->len;

-               pbuf_ref(p);

                n++;
        }
        txdescs[txprod].hdr = len;      /* If we wanted completion notification, bit 15 */
                n++;
        }
        txdescs[txprod].hdr = len;      /* If we wanted completion notification, bit 15 */