projects / systemd / .git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ca7c792) | patch
network: fix use-after-free
authorYu Watanabe <watanabe.yu+github@gmail.com>
Sat, 4 May 2019 17:43:45 +0000 (19:43 +0200)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Tue, 7 May 2019 14:55:19 +0000 (16:55 +0200)
commit2c448c8a174a4dc299c68941f742365d8fb773f0
tree6398f2e22c51f05825d0ab592aa0efb30c4da925tree | snapshot
parentca7c792b83f91f6b55bd16ee364a1d751b94cd5dcommit | diff
network: fix use-after-free

The function sd_radv_add_prefix() in dhcp6_pd_prefix_assign() may
return -EEXIST, and in that case the sd_radv_prefix object allocated
in dhcp6_pd_prefix_assign() will be freed when the function returns.
Hence, the key value in Manager::dhcp6_prefixes hashmap is lost.
src/network/networkd-dhcp6.c diff | blob | history
src/network/networkd-link.c diff | blob | history
src/network/networkd-link.h diff | blob | history
src/network/networkd-manager.c diff | blob | history
https://github.com/systemd/systemd.git