--- x\xennet6_rx.c	2011-09-22 13:47:46.000000000 +0200
+++ xennet6_rx.c	2011-09-23 22:39:47.892796400 +0200
@@ -50,8 +50,8 @@
   pb->mdl = IoAllocateMdl(pb->virtual, PAGE_SIZE, FALSE, FALSE, NULL);
   if (!pb->mdl)
   {
-    NdisFreeMemory(pb->virtual, sizeof(shared_buffer_t), 0);
-    NdisFreeMemory(pb, PAGE_SIZE, 0);
+    NdisFreeMemory(pb->virtual, PAGE_SIZE, 0);
+    NdisFreeMemory(pb, sizeof(shared_buffer_t), 0);
     return NULL;
   }
   pb->gref = (grant_ref_t)xi->vectors.GntTbl_GrantAccess(xi->vectors.context, 0,
@@ -59,8 +59,8 @@
   if (pb->gref == INVALID_GRANT_REF)
   {
     IoFreeMdl(pb->mdl);
-    NdisFreeMemory(pb->virtual, sizeof(shared_buffer_t), 0);
-    NdisFreeMemory(pb, PAGE_SIZE, 0);
+    NdisFreeMemory(pb->virtual, PAGE_SIZE, 0);
+    NdisFreeMemory(pb, sizeof(shared_buffer_t), 0);
     return NULL;
   }
   MmBuildMdlForNonPagedPool(pb->mdl);
@@ -85,8 +85,8 @@
     if (xi->rx_pb_free > RX_MAX_PB_FREELIST)
     {
       IoFreeMdl(pb->mdl);
-      NdisFreeMemory(pb->virtual, sizeof(shared_buffer_t), 0);
-      NdisFreeMemory(pb, PAGE_SIZE, 0);
+      NdisFreeMemory(pb->virtual, PAGE_SIZE, 0);
+      NdisFreeMemory(pb, sizeof(shared_buffer_t), 0);
       return;
     }
     pb->mdl->ByteCount = PAGE_SIZE;