diff options
| author |   Benoît Ganne <bganne@cisco.com> | 2020-04-17 12:09:37 +0200 |
|---|---|---|
| committer |   Florin Coras <florin.coras@gmail.com> | 2020-04-20 16:07:09 +0000 |
| commit | 7ce23f25bbc01d534ca294ce88ab0d709e3e03a7 (patch) | |
| tree | 90cf0027874bc32ec7904cbd9d4918c5ba7bdaee /src/vnet/session/session_node.c | |
| parent | da302e4fce1003a2fdd2ace7e1ae09987399092c (diff) | |
session: fix use-after-free in input node
Type: fix
Change-Id: Ie60b07abe76ad166f048f5885accd7038d8153b2
Signed-off-by: Benoît Ganne <bganne@cisco.com>
Diffstat (limited to 'src/vnet/session/session_node.c')
| -rw-r--r-- | src/vnet/session/session_node.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/vnet/session/session_node.c b/src/vnet/session/session_node.c index 0f5030b4d31..8a96f585499 100644 --- a/src/vnet/session/session_node.c +++ b/src/vnet/session/session_node.c @@ -959,6 +959,8 @@ session_tx_fifo_read_and_snd_i (session_worker_t * wrk, return SESSION_TX_NO_BUFFERS; } + transport_connection_update_tx_bytes (ctx->tc, ctx->max_len_to_snd); + ctx->left_to_snd = ctx->max_len_to_snd; n_left = ctx->n_segs_per_evt; @@ -1032,7 +1034,6 @@ session_tx_fifo_read_and_snd_i (session_worker_t * wrk, vlib_buffer_free (vm, wrk->tx_buffers, n_bufs); *n_tx_packets += ctx->n_segs_per_evt; - transport_connection_update_tx_bytes (ctx->tc, ctx->max_len_to_snd); SESSION_EVT (SESSION_EVT_DEQ, ctx->s, ctx->max_len_to_snd, ctx->max_dequeue, ctx->s->tx_fifo->has_event, wrk->last_vlib_time); |