]> git.ipfire.org Git - thirdparty/wireguard-tools.git/commit
ipc: freebsd: NULL out some freed memory in kernel_set_device()
authorKyle Evans <kevans@FreeBSD.org>
Thu, 3 Nov 2022 18:20:29 +0000 (13:20 -0500)
committerJason A. Donenfeld <Jason@zx2c4.com>
Thu, 3 Nov 2022 18:57:26 +0000 (19:57 +0100)
commit139aac59a5ab7da913d4b6dd62692fa90e2ccad4
tree6c7fde8e6650632f980434611fcda3d986c43190
parentdbf49a7d17d69b8af365ce2521df110a4710c819
ipc: freebsd: NULL out some freed memory in kernel_set_device()

The `err` path in kernel_set_device() will attempt to free() allocated
nvl_peers, but these two cases meant we could end up attempting a use
after free or a double free, as we rely on nvlist_destroy(NULL) being
a NOP as well as free(NULL).

FreeBSD-Coverity: 1500421
Signed-off-by: Kyle Evans <kevans@FreeBSD.org>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
src/ipc-freebsd.h