mirror of
https://git.proxmox.com/git/mirror_frr
synced 2025-10-25 02:46:36 +00:00
The code pattern:
for (ALL_LSDB(lsdb, lsa)) {
remove_lsa(lsa)
}
has a use after free in ALL_LSDB, since we ask for the next pointer,
after it has been freed.
Modify the code such that we grab the next pointer before we can
possibly free it.
Signed-off-by: Donald Sharp <sharpd@cumulusnetworks.com>
|
||
|---|---|---|
| .. | ||
| bgpd | ||
| helpers | ||
| isisd | ||
| lib | ||
| ospf6d | ||
| topotests | ||
| .gitignore | ||
| Makefile | ||
| pytest.ini | ||
| runtests.py | ||
| subdir.am | ||