[TIPC] Fix for NULL pointer dereference
authorEric Sesterhenn <snakebyte@gmx.de>
Mon, 26 Jun 2006 06:41:15 +0000 (23:41 -0700)
committerDavid S. Miller <davem@davemloft.net>
Mon, 26 Jun 2006 06:41:15 +0000 (23:41 -0700)
commit3ac90216abc7d39e694533aec2805efeb06bf8ac
treec3374590eb318578896b41ca5af9d098275fc36f
parenta4e0927902508a5f7f04be56d3c3e1b174481705
[TIPC] Fix for NULL pointer dereference

This fixes a bug spotted by the coverity checker, bug id #366. If
(mod(seqno - prev) != 1) we set buf to NULL, dereference it in the for
case, and set it to whatever value happes to be at adress 0+next, if it
happens to be non-zero, we even stay in the loop. It seems that the author
intended to break there.

Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
Signed-off-by: Per Liden <per.liden@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/tipc/bcast.c