diff options
| author | David Lamparter <equinox@opensourcerouting.org> | 2025-01-28 16:37:52 +0100 | 
|---|---|---|
| committer | David Lamparter <equinox@opensourcerouting.org> | 2025-01-28 16:40:25 +0100 | 
| commit | cae176e10a370f3e6829d172209f51866f235891 (patch) | |
| tree | 92a392457e091ee8417f49216298a8608b137a61 /bfdd/event.c | |
| parent | ee67699bd7e0175057ffab4c8c30c74b6c7cc844 (diff) | |
lib: fix use after free in `clear event cpu`
Freeing any item here means freeing someone's `event->hist`, leaving a
dangling pointer there.  Which will immediately be written to because
we're executing in a CLI function under the `vty_read` event, whose
`event->hist` is then updated.
Deallocating `event->hist` anywhere other than shutting down the whole
event loop is a bad idea to begin with, just zero out the stats instead.
Fixes: FRRouting/frr#16419
Signed-off-by: David Lamparter <equinox@opensourcerouting.org>
Diffstat (limited to 'bfdd/event.c')
0 files changed, 0 insertions, 0 deletions
