From f03e954b72fbdc4c66b2328e03f5ba3ebb6522b8 Mon Sep 17 00:00:00 2001 From: Louis Scalbert Date: Thu, 12 Sep 2024 09:31:49 +0200 Subject: [PATCH] isisd: fix rcap tlv double-free crash Fix rcap tlv double-free crash. It is supposed to freed later by isis_free_tlvs() -> free_tlv_router_cap(). Fixes: 49efc80d34 ("isisd: Ensure rcap is freed in error case") Signed-off-by: Louis Scalbert --- isisd/isis_tlvs.c | 1 - 1 file changed, 1 deletion(-) diff --git a/isisd/isis_tlvs.c b/isisd/isis_tlvs.c index d2dacdc113de..ea50de2bfd7c 100644 --- a/isisd/isis_tlvs.c +++ b/isisd/isis_tlvs.c @@ -6178,7 +6178,6 @@ static int unpack_tlv_router_cap(enum isis_tlv_context context, log, indent, "WARNING: Router Capability subTLV length too large compared to expected size\n"); stream_forward_getp(s, STREAM_READABLE(s)); - XFREE(MTYPE_ISIS_TLV, rcap); return 0; }