]> git.ipfire.org Git - thirdparty/systemd.git/commit
network: fix use-after-free
authorYu Watanabe <watanabe.yu+github@gmail.com>
Sat, 4 May 2019 17:43:45 +0000 (19:43 +0200)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Tue, 7 May 2019 14:55:19 +0000 (16:55 +0200)
commit2c448c8a174a4dc299c68941f742365d8fb773f0
tree6398f2e22c51f05825d0ab592aa0efb30c4da925
parentca7c792b83f91f6b55bd16ee364a1d751b94cd5d
network: fix use-after-free

The function sd_radv_add_prefix() in dhcp6_pd_prefix_assign() may
return -EEXIST, and in that case the sd_radv_prefix object allocated
in dhcp6_pd_prefix_assign() will be freed when the function returns.
Hence, the key value in Manager::dhcp6_prefixes hashmap is lost.
src/network/networkd-dhcp6.c
src/network/networkd-link.c
src/network/networkd-link.h
src/network/networkd-manager.c