-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi.

[snip]

> +     while (dev) {
> +             struct switch_dev *next = dev->next;
> +             print_dev_summary(dev);
> +             swlib_free(dev);
> +             dev = dev->next;

This looks like a user-after-free.

Given that you allocate a "next" pointer above, did you maybe mean
"dev = next;" here?

~ Jow
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/wPOAACgkQdputYINPTPOB6QCeIzONC5hxe5Z0yYBUPSwKvV1b
4JAAnjT3vquzxcvFctSX6JMoT5YpKmTp
=KX8w
-----END PGP SIGNATURE-----
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Reply via email to