mirror of
https://git.proxmox.com/git/mirror_frr
synced 2025-08-15 09:20:25 +00:00
zebra: fix use after free on RIB processing
After calling `rib_unlink` the variable `re` will point to `free()`d memory, so don't attempt to use it after this point. Found by Coverity Scan (Coverity ID 1519784) Signed-off-by: Rafael Zalamena <rzalamena@opensourcerouting.org>
This commit is contained in:
parent
2273550f04
commit
e96817f877
@ -1306,6 +1306,7 @@ static void rib_process(struct route_node *rn)
|
|||||||
vrf),
|
vrf),
|
||||||
vrf_id, rn);
|
vrf_id, rn);
|
||||||
rib_unlink(rn, re);
|
rib_unlink(rn, re);
|
||||||
|
continue;
|
||||||
} else
|
} else
|
||||||
SET_FLAG(re->status,
|
SET_FLAG(re->status,
|
||||||
ROUTE_ENTRY_REMOVED);
|
ROUTE_ENTRY_REMOVED);
|
||||||
|
Loading…
Reference in New Issue
Block a user