[linux-vrf-core] [PATCH] NULL deref on SIOCDELVRF

[Yon U. <hav...@gm...>]

Hi,

uml-4:~ # vrfctl -d <non existant VRF number>

Cause:
ioctl() ...
  case SIOCDELVRF:
fib_del_vrf  No check for fib_rules[vrf] != NULL and then
do_fib_del_vrf bombs when dereferencing NULL.



 Non tested patch:

--- net/ipv4/fib_rules.c~       Wed Nov 27 04:56:23 2002
+++ net/ipv4/fib_rules.c        Wed Dec 11 19:12:04 2002
@@ -466,7 +466,7 @@

 int fib_del_vrf(unsigned char vrf) {

-       if (!vrf) {
+       if (!vrf || fib_rules[vrf] == NULL) {
                return 0;
        }
        write_lock_bh(&fib_rules_lock[vrf]);