proxmox-mirrors/mirror_frr
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_frr synced 2025-08-09 23:48:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ospf6d: fix heap uaf

Browse Source 
Fix #667

Signed-off-by: Quentin Young <qlyoung@cumulusnetworks.com>
This commit is contained in:
Quentin Young 2017-06-06 15:47:09 +00:00
parent d7d614ae80
commit 7de6a87b55
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
ospf6d/ospf6_intra.c
View File

@ -1621,6 +1621,7 @@ ospf6_intra_brouter_calculation (struct ospf6_area *oa)
zlog_info ("brouter %s disappears via area %s", zlog_info ("brouter %s disappears via area %s",
brouter_name, oa->name); brouter_name, oa->name);
ospf6_route_remove (brouter, oa->ospf6->brouter_table); ospf6_route_remove (brouter, oa->ospf6->brouter_table);
brouter = NULL;
} }
else if (CHECK_FLAG (brouter->flag, OSPF6_ROUTE_ADD) || else if (CHECK_FLAG (brouter->flag, OSPF6_ROUTE_ADD) ||
CHECK_FLAG (brouter->flag, OSPF6_ROUTE_CHANGE)) CHECK_FLAG (brouter->flag, OSPF6_ROUTE_CHANGE))
@ -1644,8 +1645,12 @@ ospf6_intra_brouter_calculation (struct ospf6_area *oa)
/* But re-originate summaries */ /* But re-originate summaries */
ospf6_abr_originate_summary (brouter); ospf6_abr_originate_summary (brouter);
} }
UNSET_FLAG (brouter->flag, OSPF6_ROUTE_ADD);
UNSET_FLAG (brouter->flag, OSPF6_ROUTE_CHANGE); if (brouter)
{
UNSET_FLAG (brouter->flag, OSPF6_ROUTE_ADD);
UNSET_FLAG (brouter->flag, OSPF6_ROUTE_CHANGE);
}
} }
if (IS_OSPF6_DEBUG_BROUTER_SPECIFIC_AREA_ID (oa->area_id)) if (IS_OSPF6_DEBUG_BROUTER_SPECIFIC_AREA_ID (oa->area_id))