m_free: remove the M_EXT flag after freeing the mbuf extended buffer

mbufs added to the freelist shouldn't keep the M_EXT flag as they can be
recycled and the new owner could try to access the freed extended buffer.

1 files changed, 1 insertions, 0 deletions

diff --git a/src/mbuf.c b/src/mbuf.c
index 54ec721..e064ee9 100644
--- a/src/mbuf.c
+++ b/src/mbuf.c
@@ -105,6 +105,7 @@ void m_free(struct mbuf *m)
         /* If it's M_EXT, free() it */
         if (m->m_flags & M_EXT) {
             g_free(m->m_ext);
+            m->m_flags &= ~M_EXT;
         }
         /*
          * Either free() it or put it on the free list