From: John Naylon <jbpn@cambridgebroadband.com>
Please find attached a patch which fixes a minor bug in libbridge. This
only affects long-running processes that may call br_refresh() multiple
times, i.e. it doesn't affect brctl but may affect brctld, although I
have not seen this myself (I discovered the bug while working on another
process that links against libbridge).
Basically, if you call br_refresh() when there are one or more bridges up,
take all bridges down and call br_refresh() again, and finally call
br_refresh() once more, your process will probably seg fault because
bridge_list is not NULL, but points at previously-free()d memory on the
third call.
1 file changed