diff --git a/en/releases/5.3R/todo.sgml b/en/releases/5.3R/todo.sgml index 438961d0a5..05fcb0ff2a 100644 --- a/en/releases/5.3R/todo.sgml +++ b/en/releases/5.3R/todo.sgml @@ -1,7 +1,7 @@ - + %includes; %developers; @@ -49,7 +49,8 @@ ether_input() calls random_harvest() on the mbuf after it has been handed off to ether_demux(), at which point it may have been free()'d back to the mbuf allocator. It also passes in a pointer to the mbuf - itself, rather than ethernet frame header. + itself, rather than ethernet frame header. Passing of a potentially + free'd mbuf has been corrected in 6.x, but not yet merged to 5.x.