From: Ben Pfaff <blp@nicira.com>
Date: Sat, 9 Jun 2012 15:55:29 +0000 (-0400)
Subject: dpif-netdev: Fix use-after-free in dpif_netdev_recv.
X-Git-Tag: sliver-openvswitch-1.8.90-0~48^2~378
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=a9c34071edc8371b5a4d9eebf8256723ffe92df2;p=sliver-openvswitch.git

dpif-netdev: Fix use-after-free in dpif_netdev_recv.

Found by valgrind.

Signed-off-by: Ben Pfaff <blp@nicira.com>
---

diff --git a/lib/dpif-netdev.c b/lib/dpif-netdev.c
index fb0a863e3..cade79efe 100644
--- a/lib/dpif-netdev.c
+++ b/lib/dpif-netdev.c
@@ -956,7 +956,7 @@ dpif_netdev_recv(struct dpif *dpif, struct dpif_upcall *upcall,
         free(u);
 
         ofpbuf_uninit(buf);
-        *buf = *u->packet;
+        *buf = *upcall->packet;
 
         return 0;
     } else {