wdp-xflow: Remove wx structure from global list when closing.

Fixes a use-after-free error in wx_run().

Reported-by: Hao Zheng <hzheng@nicira.com>

diff --git a/ofproto/wdp-xflow.c b/ofproto/wdp-xflow.c
index 09cdc7d..0cc6fc7 100644 (file)
--- a/ofproto/wdp-xflow.c
+++ b/ofproto/wdp-xflow.c
@@ -1386,6 +1386,7 @@ wx_close(struct wdp *wdp)
 {
     struct wx *wx = wx_cast(wdp);
 
+    list_remove(&wx->list_node);
     wx_flow_flush(wdp);
     xfif_close(wx->xfif);
     classifier_destroy(&wx->cls);