From 6ed81620909387c7a55dbe03b152a75fdc219a64 Mon Sep 17 00:00:00 2001 From: Benoît Ganne Date: Tue, 21 Jan 2020 18:33:14 +0100 Subject: api: check id is valid for bounce checking MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit If the id is invalid we cannot check whether we must free the message or not, free it anyway. Type: fix Change-Id: Ie4426f601390d1e5e14c739f670e8c1e6e3aaf1e Signed-off-by: Benoît Ganne (cherry picked from commit ff13e46215ab96df988310b4a20eddefad92de99) --- src/vlibapi/api_shared.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/vlibapi/api_shared.c b/src/vlibapi/api_shared.c index ce7c4aec712..6849ab0783c 100644 --- a/src/vlibapi/api_shared.c +++ b/src/vlibapi/api_shared.c @@ -595,7 +595,7 @@ vl_msg_api_handler_with_vm_node (api_main_t * am, * Special-case, so we can e.g. bounce messages off the vnet * main thread without copying them... */ - if (!(am->message_bounce[id])) + if (id >= vec_len (am->message_bounce) || !(am->message_bounce[id])) vl_msg_api_free (the_msg); if (PREDICT_FALSE (am->elog_trace_api_messages)) -- cgit 1.2.3-korg