ofproto: Fix use after free in ofoperation_complete().
authorEthan Jackson <ethan@nicira.com>
Thu, 7 Jun 2012 20:05:41 +0000 (13:05 -0700)
committerEthan Jackson <ethan@nicira.com>
Thu, 7 Jun 2012 20:23:06 +0000 (13:23 -0700)
commit4ad71abb2f6bc4e6b99b768d90df69d7af816aed
tree50678e9e712a363a2d264dd0d7774adb99a750e9
parent04a67c083458784d1fed689bcb7ed904026d2352
ofproto: Fix use after free in ofoperation_complete().

In one edge case, ofoperation_complete() destroys its rule, without
updating its ofoperation that the rule is gone.  Later in the same
function, ofoperation_destroy() attempts to modify the rule which
already destroyed.

Bug #11797.
Signed-off-by: Ethan Jackson <ethan@nicira.com>
ofproto/ofproto.c