mirror of
https://git.proxmox.com/git/mirror_frr
synced 2025-10-24 21:15:25 +00:00
2e37407f9d
The code pattern:
for (ALL_LSDB(lsdb, lsa)) {
remove_lsa(lsa)
}
has a use after free in ALL_LSDB, since we ask for the next pointer,
after it has been freed.
Modify the code such that we grab the next pointer before we can
possibly free it.
Signed-off-by: Donald Sharp <sharpd@cumulusnetworks.com>
|
||
|---|---|---|
| .. | ||
| test_lsdb.c | ||
| test_lsdb.in | ||
| test_lsdb.py | ||
| test_lsdb.refout | ||