secchan: Fix another use-after-free bug.

diff --git a/secchan/ofproto.c b/secchan/ofproto.c
index 7b2b468e69ae9f202380b157a1fc2d4a14471325..9eb1a26983d662ec574ba7b52d7cc1eacb2baeb3 100644 (file)
--- a/secchan/ofproto.c
+++ b/secchan/ofproto.c
@@ -2417,6 +2417,7 @@ expire_rule(struct cls_rule *cls_rule, void *p_)
                 if (!dpif_flow_del(&p->dpif, &odp_flow)) {
                     update_stats(rule, &odp_flow.stats);
                 }
+                classifier_remove(&p->cls, &subrule->cr);
                 rule_destroy(subrule);
             }
         } else {