Page MenuHomeFreeBSD

route: fix rtentry double free
ClosedPublic

Authored by kp on Jun 3 2025, 12:49 PM.
Tags
None
Referenced Files
F175886631: D50665.id.diff
Wed, Oct 14, 5:18 AM
F175868058: D50665.id156471.diff
Wed, Oct 14, 1:09 AM
F175865299: D50665.id156478.diff
Wed, Oct 14, 12:41 AM
F175862292: D50665.id156573.diff
Tue, Oct 13, 11:58 PM
F175861307: D50665.diff
Tue, Oct 13, 11:44 PM
Unknown Object (File)
Tue, Oct 6, 6:09 PM
Unknown Object (File)
Sat, Oct 3, 1:50 PM
Unknown Object (File)
Fri, Oct 2, 11:38 PM

Details

Summary

add_route_flags() frees the rtentry on error when called with the RTM_F_CREATE
flag. Don't free the rtentry a second time.

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kp requested review of this revision.Jun 3 2025, 12:49 PM
sys/net/route/route_ctl.c
676

Then isn't this access to freed rt_new?

sys/net/route/route_ctl.c
676

Good catch, I missed that one.
I think we can get away with using 'rt' here instead of 'rt_new', because rt_new should be a copy of rt.

Remove one more use of rt_new

This revision is now accepted and ready to land.Jun 5 2025, 7:36 AM
This revision was automatically updated to reflect the committed changes.