interface-event: Fix possible out of bounds array access
[project/netifd.git] / interface-event.c
index 82c274d..3cdfbdb 100644 (file)
@@ -30,7 +30,7 @@ static void task_complete(struct uloop_process *proc, int ret);
 static struct uloop_process task = {
        .cb = task_complete,
 };
-char *eventnames[] = {"ifdown", "ifup", "ifupdate"};
+static const char * const eventnames[] = {"ifdown", "ifup", "ifupdate", "free", "reload"};
 
 static void
 run_cmd(const char *ifname, const char *device, enum interface_event event,
@@ -83,7 +83,7 @@ call_hotplug(void)
        current_ev = current->hotplug_ev;
        list_del_init(&current->hotplug_list);
 
-       if (current_ev == IFEV_UP && current->l3_dev.dev)
+       if ((current_ev == IFEV_UP || current_ev == IFEV_UPDATE) && current->l3_dev.dev)
                device = current->l3_dev.dev->ifname;
 
        D(SYSTEM, "Call hotplug handler for interface '%s', event '%s' (%s)\n",
@@ -120,22 +120,11 @@ interface_queue_event(struct interface *iface, enum interface_event ev)
        if (current == iface) {
                /* an event for iface is being processed */
                if (!list_empty(&iface->hotplug_list)) {
-                       /* an additional event for iface is pending */
-                       if ((ev != current_ev || ev == IFEV_UPDATE) &&
-                       !(iface->hotplug_ev == IFEV_UP && ev == IFEV_UPDATE)) {
-                               /* if incoming event is different from the one
-                                * being handled or if it is an update,
-                                * overwrite pending event, but never
-                                * overwrite an ifup with an ifupdate */
+                       /* an additional event for iface is pending   */
+                       /* overwrite pending event if it differs from */
+                       /* an update                                  */
+                       if (ev != IFEV_UPDATE)
                                iface->hotplug_ev = ev;
-                       }
-                       else if (ev == current_ev && ev != IFEV_UPDATE) {
-                               /* if incoming event is not an ifupdate
-                                * and is the same as the one that is
-                                * being handled, remove it from the
-                                * pending list */
-                               list_del_init(&iface->hotplug_list);
-                       }
                }
                else {
                        /* no additional event for iface is pending */