ofproto: Fix use after free in ofoperation_complete().
authorEthan Jackson <ethan@nicira.com>
Thu, 7 Jun 2012 20:05:41 +0000 (13:05 -0700)
committerEthan Jackson <ethan@nicira.com>
Thu, 7 Jun 2012 20:09:55 +0000 (13:09 -0700)
commit12804888e56f6551825f0864e374eb5bac427147
treea9c7e728ea35c5ec8ba5c472e710354071ccf54d
parent614ec445172f05128b54e20ba6aebc1f35668b67
ofproto: Fix use after free in ofoperation_complete().

In one edge case, ofoperation_complete() destroys its rule, without
updating its ofoperation that the rule is gone.  Later in the same
function, ofoperation_destroy() attempts to modify the rule which
already destroyed.

Bug #11797.
Signed-off-by: Ethan Jackson <ethan@nicira.com>
ofproto/ofproto.c