git.droids-corp.org / dpdk.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 85bf2b6) | patch
ip_frag: fix double free of chained mbufs
authorAllain Legacy <allain.legacy@windriver.com>
Mon, 19 Mar 2018 14:25:23 +0000 (09:25 -0500)
committerThomas Monjalon <thomas@monjalon.net>
Sun, 15 Apr 2018 12:44:07 +0000 (14:44 +0200)
commit4f512a1919998933a39886ab2ec7f2fdde48756c
tree5caf9710dec63979f9704a810a78daa2909ff514tree | snapshot
parent85bf2b6001d2b1aa2383d5856f71f2c9e1ebf400commit | diff
ip_frag: fix double free of chained mbufs

The first mbuf and the last mbuf to be visited in the preceding loop
are not set to NULL in the fragmentation table.  This creates the
possibility of a double free when the fragmentation table is later freed
with rte_ip_frag_table_destroy().

Fixes: 95908f52393d ("ip_frag: free mbufs on reassembly table destroy")
Cc: stable@dpdk.org
Signed-off-by: Allain Legacy <allain.legacy@windriver.com>
Acked-by: Konstantin Ananyev <konstantin.ananyev@intel.com>
lib/librte_ip_frag/rte_ipv4_reassembly.c diff | blob | history
lib/librte_ip_frag/rte_ipv6_reassembly.c diff | blob | history
DPDK repo used for reviews