pim-msdp: Fix pimd crash on mesh-group delete.

The mesh group contents were being accessed after memory was freed.

Signed-off-by: Anuradha Karuppiah <anuradhak@cumulusnetworks.com>

diff --git a/pimd/pim_msdp.c b/pimd/pim_msdp.c
index 0c5b1c7f2ed3453fdd650a298bb66f9a6027df1b..3562a0e3484bce2db2a74650a2f216c66c4f9e91 100644 (file)
--- a/pimd/pim_msdp.c
+++ b/pimd/pim_msdp.c
@@ -1185,10 +1185,11 @@ pim_msdp_mg_free(struct pim_msdp_mg *mg)
   }
   if (mg->mesh_group_name)
     XFREE(MTYPE_PIM_MSDP_MG_NAME, mg->mesh_group_name);
-  XFREE(MTYPE_PIM_MSDP_MG, mg);
 
   if (mg->mbr_list)
     list_free(mg->mbr_list);
+
+  XFREE(MTYPE_PIM_MSDP_MG, mg);
   msdp->mg = NULL;
 }