bgpd: fix NULL pointer dereference bug

Other parts of the rfapi code check if the 'rfg->rfapi_import_table'
pointer is NULL or not before using it. Do the same here to fix a crash
detected by the CLI fuzzer.

Signed-off-by: Renato Westphal <renato@opensourcerouting.org>

diff --git a/bgpd/rfapi/rfapi_vty.c b/bgpd/rfapi/rfapi_vty.c
index cd12edbccb1f9c47c30aadccd64f2684c9e93d27..871711312a5496f29c8b41a2434e256258ed58c4 100644 (file)
--- a/bgpd/rfapi/rfapi_vty.c
+++ b/bgpd/rfapi/rfapi_vty.c
@@ -4844,6 +4844,10 @@ DEFUN (add_vrf_prefix_rd_label_pref,
 static int rfapi_cfg_group_it_count(struct rfapi_nve_group_cfg *rfg)
 {
        int count = 0;
+
+       if (rfg->rfapi_import_table == NULL)
+               return 0;
+
        afi_t afi = AFI_MAX;
        while (afi-- > 0) {
                count += rfg->rfapi_import_table->local_count[afi];