From 2af71375f7a03d78dc9e3e4155e59e51f17a8327 Mon Sep 17 00:00:00 2001 From: Hans Dedecker Date: Thu, 12 Feb 2015 17:41:16 +0100 Subject: netifd: Keep reference to a config copy in device type specific reload handler as the original config pointer might go stale Fixes random observed crashes in blobmsg_parse when device type specific config data is parsed. Signed-off-by: Hans Dedecker --- macvlan.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'macvlan.c') diff --git a/macvlan.c b/macvlan.c index 019a7ff..051fe05 100644 --- a/macvlan.c +++ b/macvlan.c @@ -140,6 +140,7 @@ macvlan_free(struct device *dev) mvdev = container_of(dev, struct macvlan_device, dev); device_remove_user(&mvdev->parent); + free(mvdev->config_data); free(mvdev); } @@ -197,6 +198,7 @@ macvlan_reload(struct device *dev, struct blob_attr *attr) struct macvlan_device *mvdev; mvdev = container_of(dev, struct macvlan_device, dev); + attr = blob_memdup(attr); blobmsg_parse(device_attr_list.params, __DEV_ATTR_MAX, tb_dev, blob_data(attr), blob_len(attr)); @@ -226,6 +228,7 @@ macvlan_reload(struct device *dev, struct blob_attr *attr) macvlan_config_init(dev); } + free(mvdev->config_data); mvdev->config_data = attr; return ret; } -- cgit v1.2.1