diff options
| author | cinap_lenrek <cinap_lenrek@felloff.net> | 2018-06-11 03:19:42 +0200 |
|---|---|---|
| committer | cinap_lenrek <cinap_lenrek@felloff.net> | 2018-06-11 03:19:42 +0200 |
| commit | 71402b2ea15d0e2bf939b6e095ad56fa14ab2d0a (patch) | |
| tree | b851df04c4d1c040aa3fc62ce932f82d90faf99f /sys/lib/python | |
| parent | 94f6f89ac1e8731a27c38b54b54348bc063fb6c3 (diff) | |
devip: fix use after free in ipifcremmulti()
closeconv() calls ipifcremmulti() like:
while((mp = cv->multi) != nil)
ipifcremmulti(cv, mp->ma, mp->ia);
so we have to defer freeing the entry after doing:
if((lifc = iplocalonifc(ifc, ia)) != nil)
remselfcache(f, ifc, lifc, ma);
which accesses the otherwise free'd ia and ma arguments.
Diffstat (limited to 'sys/lib/python')
0 files changed, 0 insertions, 0 deletions