Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Dec 2017 02:05:19 +0000 (UTC)
From:      "Andrey V. Elsukov" <ae@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org
Subject:   svn commit: r327141 - stable/11/sys/net
Message-ID:  <201712240205.vBO25JQs003595@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: ae
Date: Sun Dec 24 02:05:19 2017
New Revision: 327141
URL: https://svnweb.freebsd.org/changeset/base/327141

Log:
  MFC r326898:
    Fix possible memory leak.
  
    vxlan_ftable entries are sorted in descending order, due to wrong arguments
    order it is possible to stop search before existing element will be found.
    Then new element will be allocated in vxlan_ftable_update_locked() and can
    be inserted in the list second time or trigger MPASS() assertion with
    enabled INVARIANTS.
  
    PR:		224371

Modified:
  stable/11/sys/net/if_vxlan.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/net/if_vxlan.c
==============================================================================
--- stable/11/sys/net/if_vxlan.c	Sun Dec 24 01:55:12 2017	(r327140)
+++ stable/11/sys/net/if_vxlan.c	Sun Dec 24 02:05:19 2017	(r327141)
@@ -778,7 +778,7 @@ vxlan_ftable_entry_lookup(struct vxlan_softc *sc, cons
 	hash = VXLAN_SC_FTABLE_HASH(sc, mac);
 
 	LIST_FOREACH(fe, &sc->vxl_ftable[hash], vxlfe_hash) {
-		dir = vxlan_ftable_addr_cmp(fe->vxlfe_mac, mac);
+		dir = vxlan_ftable_addr_cmp(mac, fe->vxlfe_mac);
 		if (dir == 0)
 			return (fe);
 		if (dir > 0)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201712240205.vBO25JQs003595>