fib: fix use-after-free for interface adj removal
Type: fix Change-Id: I82308e368d14d84f5970dad229bdcf2de7d1839d Signed-off-by: Benoît Ganne <bganne@cisco.com> (cherry picked from commit 7391156ce68a81f258d65f498ec6161d694fae47)
This commit is contained in:

committed by
Dave Barach

parent
8b7faa7270
commit
f864498309
@ -823,12 +823,15 @@ adj_nbr_interface_delete_one (adj_index_t ai,
|
||||
};
|
||||
ip_adjacency_t *adj;
|
||||
|
||||
adj_lock(ai);
|
||||
|
||||
adj = adj_get(ai);
|
||||
|
||||
adj->ia_flags |= ADJ_FLAG_SYNC_WALK_ACTIVE;
|
||||
fib_walk_sync(FIB_NODE_TYPE_ADJ, ai, &bw_ctx);
|
||||
adj->ia_flags &= ~ADJ_FLAG_SYNC_WALK_ACTIVE;
|
||||
|
||||
adj_unlock(ai);
|
||||
return (ADJ_WALK_RC_CONTINUE);
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user