Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-07-23 03:13:01 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'fix/sec-1137-br-glue-double-free_v5.3' into 'release/v5.3'

Browse Source 
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v5.3)

See merge request espressif/esp-idf!50646
This commit is contained in:
Euripedes Rocha
2026-07-21 10:42:25 +02:00
parent 9f583bc39b 53e0944889
commit 7ec3fe8a2c
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
components/esp_netif/lwip/esp_netif_br_glue.c
View File

@@ -196,6 +196,10 @@ static esp_err_t esp_netif_br_glue_clear_instance_handlers(esp_netif_br_glue_han
{
ESP_RETURN_ON_FALSE(esp_netif_br_glue, ESP_ERR_INVALID_ARG, TAG, "esp_netif_br_glue handle can't be null");
if (esp_netif_br_glue->eth_ctx_handlers == NULL) {
return ESP_OK;
}
if (esp_netif_br_glue->eth_ctx_handlers[START_CTX_HANDLER]) {
esp_event_handler_instance_unregister(ETH_EVENT, ETHERNET_EVENT_START, esp_netif_br_glue->eth_ctx_handlers[START_CTX_HANDLER]);
}
@@ -212,6 +216,7 @@ static esp_err_t esp_netif_br_glue_clear_instance_handlers(esp_netif_br_glue_han
esp_event_handler_instance_unregister(ETH_EVENT, ETHERNET_EVENT_DISCONNECTED, esp_netif_br_glue->eth_ctx_handlers[DISCONNECT_CTX_HANDLER]);
}
free(esp_netif_br_glue->eth_ctx_handlers);
esp_netif_br_glue->eth_ctx_handlers = NULL;
if (esp_netif_br_glue->get_ip_ctx_handler) {
esp_event_handler_instance_unregister(IP_EVENT, IP_EVENT_ETH_GOT_IP, esp_netif_br_glue->get_ip_ctx_handler);