From 36f12ac68248229b109c77a69e6b69b3b3efd641 Mon Sep 17 00:00:00 2001 From: Benoît Ganne Date: Fri, 17 Apr 2020 12:09:37 +0200 Subject: session: fix use-after-free in input node MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Type: fix Change-Id: Ie60b07abe76ad166f048f5885accd7038d8153b2 Signed-off-by: Benoît Ganne (cherry picked from commit 7ce23f25bbc01d534ca294ce88ab0d709e3e03a7) --- src/vnet/session/session_node.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/vnet/session/session_node.c b/src/vnet/session/session_node.c index eb5876d2c3d..ebb3503ff6b 100644 --- a/src/vnet/session/session_node.c +++ b/src/vnet/session/session_node.c @@ -906,6 +906,8 @@ session_tx_fifo_read_and_snd_i (session_worker_t * wrk, return SESSION_TX_NO_BUFFERS; } + transport_connection_update_tx_bytes (ctx->tc, ctx->max_len_to_snd); + ctx->left_to_snd = ctx->max_len_to_snd; n_left = ctx->n_segs_per_evt; @@ -979,7 +981,6 @@ session_tx_fifo_read_and_snd_i (session_worker_t * wrk, vlib_buffer_free (vm, wrk->tx_buffers, n_bufs); *n_tx_packets += ctx->n_segs_per_evt; - transport_connection_update_tx_bytes (ctx->tc, ctx->max_len_to_snd); SESSION_EVT (SESSION_EVT_DEQ, ctx->s, ctx->max_len_to_snd, ctx->max_dequeue, ctx->s->tx_fifo->has_event, wrk->last_vlib_time); -- cgit 1.2.3-korg