Skip to content

Commit e6d64d2

Browse files
committed
Fix NULL timeout dereference in ff_lro_flush
Pass a zero timeval to tcp_lro_flush_inactive instead of NULL to avoid a segfault when lro_active is non-empty (tcp_lro.c:633 dereferences the timeout pointer unconditionally after the empty-list early return).
1 parent 5e2a7ac commit e6d64d2

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

lib/ff_veth.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -543,7 +543,8 @@ ff_lro_rx(void *lro, void *m)
543543
void
544544
ff_lro_flush(void *lro)
545545
{
546-
tcp_lro_flush_inactive(lro, NULL);
546+
struct timeval tv = {0, 0};
547+
tcp_lro_flush_inactive(lro, &tv);
547548
}
548549

549550
void

0 commit comments

Comments
 (0)