From b608d5b5ac469d47072aedd573e5d3475f4d9cf4 Mon Sep 17 00:00:00 2001 From: Paul Jakma Date: Wed, 2 Jul 2008 02:12:07 +0000 Subject: [bgpd] Fix double-free crash in bgp_table_finish, seen with rs-client 2008-07-02 Stephen Hemminger * bgp_table.{c,h}: (bgp_table_finish) Take a double pointer and scrub pointer in caller, so fixing double-free crashes seen with route-server-client configuration. * *.c: Adjust all callers of bgp_table_finish 2008-07-02 Paul Jakma * bgp_table.{c,h}: (bgp_node_delete, bgp_table_free) shouldn't be exported. --- bgpd/bgp_vty.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'bgpd/bgp_vty.c') diff --git a/bgpd/bgp_vty.c b/bgpd/bgp_vty.c index 927e99a1..f1749a78 100644 --- a/bgpd/bgp_vty.c +++ b/bgpd/bgp_vty.c @@ -2153,7 +2153,7 @@ peer_rsclient_unset_vty (struct vty *vty, const char *peer_str, listnode_delete (bgp->rsclient, peer); } - bgp_table_finish (peer->rib[bgp_node_afi(vty)][bgp_node_safi(vty)]); + bgp_table_finish (&peer->rib[bgp_node_afi(vty)][bgp_node_safi(vty)]); return CMD_SUCCESS; } -- cgit v1.2.3