dpif-netdev: Fix use-after-free in port_unref().
authorBen Pfaff <blp@nicira.com>
Wed, 21 May 2014 00:09:59 +0000 (17:09 -0700)
committerBen Pfaff <blp@nicira.com>
Wed, 21 May 2014 23:50:23 +0000 (16:50 -0700)
commit7a7196e3a9b770717e19084e966035ca7890a938
tree382e613ab4ca56ccd0fc24ffcf293267d25c54f8
parentbce634855419fd6e9462500f786ed9aa100bdc2d
dpif-netdev: Fix use-after-free in port_unref().

When the last rxq is closed (which releases the rxq's internal reference
to its netdev) the next call to netdev_n_rxq() accesses freed memory.

Found by valgrind.

Signed-off-by: Ben Pfaff <blp@nicira.com>
Reported-by: Jarno Rajahalme <jrajahalme@nicira.com>
Acked-by: Jarno Rajahalme <jrajahalme@nicira.com>
lib/dpif-netdev.c