--- src/sys/netinet/ip_input.c	2005/08/31 22:21:23	1.58
+++ src/sys/netinet/ip_input.c	2005/09/22 06:45:01	1.59
@@ -1233,6 +1233,7 @@ ip_reass(struct mbuf *m, struct ipq *fp,
 		m->m_nextpkt = nq;
 		ipstat.ips_fragdropped++;
 		fp->ipq_nfrags--;
+		q->m_nextpkt = NULL;
 		m_freem(q);
 	}
 
@@ -1368,6 +1369,7 @@ ip_freef(struct ipq *fp)
 	while (fp->ipq_frags) {
 		q = fp->ipq_frags;
 		fp->ipq_frags = q->m_nextpkt;
+		q->m_nextpkt = NULL;
 		m_freem(q);
 	}
 	remque(fp);