diff options
| author | Olivier Dugeon <olivier.dugeon@orange.com> | 2018-01-23 16:15:58 +0100 |
|---|---|---|
| committer | Olivier Dugeon <olivier.dugeon@orange.com> | 2018-01-23 16:15:58 +0100 |
| commit | 139a482cf0fad8056dcd53b554f467079d0b7e68 (patch) | |
| tree | 408c15f069384f1ab7124d4b766179273e937bf6 /lib/frr_pthread.c | |
| parent | b782607f7f2125dd0e5789d5744cc97baf03b0e6 (diff) | |
OSPFD: Solve Issue #1652
Issue 1652 was related to OSPF Crash on termination when ospf is
configured to flood self Opaque LSA e.g TE or RI Opaque LSA.
Analysis:
The problem resides in free_opaque_info_per_type() line 576 of
ospf_opaque.c. Once LSA flush, the function removes by calling
listnode_delete() function the opaque_info_per_type data structure.
However, this is also performed at the upper level function
ospf_opaque_type10lsa_term() which call list_delete_and_null() function.
This result into a double free pointer exception.
Solution:
Remove call to listnode_delete() calls in free_opaque_info_per_type()
function as it is done by list_delete_and_null(). Delete lines 592 - 615.
Remove also second call to ospf_opaque_type10lsa_term() in ospfd.c line 848.
Signed-off-by: Olivier Dugeon <olivier.dugeon@orange.com>
Diffstat (limited to 'lib/frr_pthread.c')
0 files changed, 0 insertions, 0 deletions
