connmgr: Fix wild pointer dereference in connmgr_broadcast().
authorBen Pfaff <blp@nicira.com>
Thu, 31 Mar 2011 21:13:36 +0000 (14:13 -0700)
committerBen Pfaff <blp@nicira.com>
Thu, 31 Mar 2011 21:28:42 +0000 (14:28 -0700)
Fixes a segfault when fail-open goes into effect.

ofproto/connmgr.c

index 166ef8c..95cc43d 100644 (file)
@@ -1164,7 +1164,7 @@ connmgr_broadcast(struct connmgr *mgr, struct ofpbuf *packet)
         }
     }
     if (prev) {
-        ofconn_send_reply(ofconn, packet);
+        ofconn_send_reply(prev, packet);
     } else {
         ofpbuf_delete(packet);
     }