ubus: fix a use-after-free bug

Initialize blob_buf before issuing a network interface status call

Signed-off-by: Felix Fietkau <nbd@nbd.name>

diff --git a/ubus.c b/ubus.c
index d2d1150458775008e0fb44c17efcfff10a0d2c40..644df1a8533bc4ec53c680d95a92c70a0a7b1182 100644 (file)
--- a/ubus.c
+++ b/ubus.c
@@ -419,6 +419,7 @@ int qosify_ubus_check_interface(const char *name, char *ifname, int ifname_len)
        if (ubus_lookup_id(&conn.ctx, obj_name, &id))
                return -1;
 
+       blob_buf_init(&b, 0);
        ubus_invoke(&conn.ctx, id, "status", b.head, netifd_if_cb, &req, 1000);
 
        if (!ifname[0])