commit b5f2c1267ef8c7694bb96aff748a866775ab1cbe
author paul <paul> Mon Nov 10 23:56:29 2003 +0000
committer paul <paul> Mon Nov 10 23:56:29 2003 +0000
tree 229268eb207bd8088834680c8726d51446f2705d
parent 1302bdc7ebf1ebf4ca4051011c75dab2453393fc

2003-11-10 Claus Endres <claus@endresconsulting.com>

        * ospfd/ospf_interface.c: (ospf_if_table_lookup) grab reference to
          rn->info /before/ calling route_unlock_node() as some systems
          may deliberately poison freed memory, eg FreeBSD 5.1.
          see [quagga-dev 417].

ospfd/ospf_interface.c

diff --git a/ospfd/ospf_interface.c b/ospfd/ospf_interface.c
index 2519ec9..2afe19e 100644
--- a/ospfd/ospf_interface.c
+++ b/ospfd/ospf_interface.c
@@ -131,13 +131,15 @@
 {
   struct prefix p;
   struct route_node *rn;
+  struct ospf_interface *rninfo;
   
   p = *prefix;
 
   rn = route_node_get (IF_OIFS (ifp), &p);
   /* route_node_get implicitely locks */
+  rninfo = (struct ospf_interface *) rn->info;
   route_unlock_node (rn);
-  return (struct ospf_interface *) rn->info;
+  return rninfo;
 }
 
 void