diff options
| author | Quentin Young <qlyoung@cumulusnetworks.com> | 2020-03-03 20:27:49 -0500 |
|---|---|---|
| committer | Quentin Young <qlyoung@cumulusnetworks.com> | 2020-03-05 13:27:01 -0500 |
| commit | 61980c71c435f19142b32fdb7bf7d214a534684c (patch) | |
| tree | 7d1015215382f142ba9b4e4d7ab0300253f157cf /lib/if.c | |
| parent | 01abb5acde5891f48491282b32a06b873be1f98a (diff) | |
vrrpd: always null mvl_ifp ptr when mvl is deleted
When we get a deletion notification for the macvlan device, we need to
do two things. First, down the VRRP session if it's up. Second, since
the mvl device is dynamic (i.e. not explicitly configured by FRR) it
will be deleted upon return from the callback, so we need to drop the
pointer to it. The checks for the first and second one were one check so
the pointer was only nulled when the session was already up, leading to
a later heap UAF on the mvl ifp.
Signed-off-by: Quentin Young <qlyoung@cumulusnetworks.com>
Diffstat (limited to 'lib/if.c')
0 files changed, 0 insertions, 0 deletions
