Skip to content

Commit

Permalink
isisd: fix rcap tlv double-free crash
Browse files Browse the repository at this point in the history
Fix rcap tlv double-free crash. It is supposed to freed later by
isis_free_tlvs() -> free_tlv_router_cap().

Fixes: 49efc80 ("isisd: Ensure rcap is freed in error case")
Signed-off-by: Louis Scalbert <[email protected]>
  • Loading branch information
louis-6wind committed Sep 12, 2024
1 parent bf1fa1b commit f03e954
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion isisd/isis_tlvs.c
Original file line number Diff line number Diff line change
Expand Up @@ -6178,7 +6178,6 @@ static int unpack_tlv_router_cap(enum isis_tlv_context context,
log, indent,
"WARNING: Router Capability subTLV length too large compared to expected size\n");
stream_forward_getp(s, STREAM_READABLE(s));
XFREE(MTYPE_ISIS_TLV, rcap);
return 0;
}

Expand Down

0 comments on commit f03e954

Please sign in to comment.