proxmox-mirrors/mirror_frr
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_frr synced 2025-07-27 13:46:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

bgpd: Fix crash when deleting the SRv6 locator

Browse Source 
When BGP receives a `SRV6_LOCATOR_DEL` from zebra, it invokes
`bgp_zebra_process_srv6_locator_delete` to process the message.

`bgp_zebra_process_srv6_locator_delete` obtains a pointer to the default
BGP instance and then dereferences this pointer.

If the default BGP instance is not ready / not configured yet, this
pointer this pointer is `NULL` and dereferencing it causes BGP to crash.

This commit fix the issue by adding a a check to verify if the pointer
is `NULL` and returning early if it is.

Signed-off-by: Carmine Scarpitta <cscarpit@cisco.com>
(cherry picked from commit ae3241b96d)
This commit is contained in:
Carmine Scarpitta 2024-05-03 23:35:05 +02:00 committed by Mergify
parent 8fb9a51728
commit 20593bf0fb
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
bgpd/bgp_zebra.c
View File

@ -3210,6 +3210,9 @@ static int bgp_zebra_process_srv6_locator_delete(ZAPI_CALLBACK_ARGS)
struct in6_addr *tovpn_sid; struct in6_addr *tovpn_sid;
struct prefix_ipv6 tmp_prefi; struct prefix_ipv6 tmp_prefi;
if (!bgp)
return 0;
if (zapi_srv6_locator_decode(zclient->ibuf, &loc) < 0) if (zapi_srv6_locator_decode(zclient->ibuf, &loc) < 0)
return -1; return -1;