dpif-netdev: Fix use-after-free in port_unref().
authorBen Pfaff <blp@nicira.com>
Wed, 21 May 2014 00:09:59 +0000 (17:09 -0700)
committerBen Pfaff <blp@nicira.com>
Wed, 21 May 2014 23:44:56 +0000 (16:44 -0700)
commit87400a3d4cc4a7da015485002753aaaeb860433a
tree3af07ce30c438efaf1614c926accd2cd93d541f4
parent34a0d77840ab9d60367f017b9580546e78fd9dfb
dpif-netdev: Fix use-after-free in port_unref().

When the last rxq is closed (which releases the rxq's internal reference
to its netdev) the next call to netdev_n_rxq() accesses freed memory.

Found by valgrind.

Signed-off-by: Ben Pfaff <blp@nicira.com>
Reported-by: Jarno Rajahalme <jrajahalme@nicira.com>
Acked-by: Jarno Rajahalme <jrajahalme@nicira.com>
lib/dpif-netdev.c