diff options
| author |   Benoît Ganne <bganne@cisco.com> | 2019-10-16 15:08:37 +0200 |
|---|---|---|
| committer |   Dave Barach <openvpp@barachs.net> | 2019-10-17 20:25:54 +0000 |
| commit | f864498309fb771f6a4ded95d72e343535570774 (patch) | |
| tree | 4aed51bee148e23cb79a3169ca1dc07ffaf9bf3f | |
| parent | 8b7faa7270f13ec7e0687a49cfc5ede3b90e9a1f (diff) | |
fib: fix use-after-free for interface adj removal
Type: fix
Change-Id: I82308e368d14d84f5970dad229bdcf2de7d1839d
Signed-off-by: Benoît Ganne <bganne@cisco.com>
(cherry picked from commit 7391156ce68a81f258d65f498ec6161d694fae47)
| -rw-r--r-- | src/vnet/adj/adj_nbr.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/vnet/adj/adj_nbr.c b/src/vnet/adj/adj_nbr.c index cbd6691f78f..7f053c82d59 100644 --- a/src/vnet/adj/adj_nbr.c +++ b/src/vnet/adj/adj_nbr.c @@ -823,12 +823,15 @@ adj_nbr_interface_delete_one (adj_index_t ai, }; ip_adjacency_t *adj; + adj_lock(ai); + adj = adj_get(ai); adj->ia_flags |= ADJ_FLAG_SYNC_WALK_ACTIVE; fib_walk_sync(FIB_NODE_TYPE_ADJ, ai, &bw_ctx); adj->ia_flags &= ~ADJ_FLAG_SYNC_WALK_ACTIVE; + adj_unlock(ai); return (ADJ_WALK_RC_CONTINUE); } |