diff options
| author |   Ivan Kelly <ivan@midokura.com> | 2016-10-07 18:02:43 +0200 |
|---|---|---|
| committer |   Chris Luke <chris_luke@comcast.com> | 2016-10-10 16:23:31 +0000 |
| commit | bfe737a1b29afea2e10248b8c9fa800148fbd573 (patch) | |
| tree | 2bb706ed1d297cc36c1b00a14b4087b0c0fcf7be /vnet/etc/scripts/l2flood | |
| parent | 4c42e913c4f9723d27f6501f6e1b6a13b9c2f9f8 (diff) | |
Fix double free in af_packet api/cli
The api was allocating a vector for the name, passing it, then freeing
it, on create. The cli allocated, passed then forgot about it.
af_packet_create_if was storing a reference to the name, which in the
case of the api, meant it was referencing dead memory. On
af_packet_delete_if this reference was freed, so in the api case, there
was a double free.
Also, the cli for delete leaked the name.
Change-Id: I4d572bd2936eaf8ea7a0a8ff282e83ac2bf1b062
Signed-off-by: Ivan Kelly <ivan@midokura.com>
Diffstat (limited to 'vnet/etc/scripts/l2flood')
0 files changed, 0 insertions, 0 deletions