Grab the state before freeing the address.

1 files changed, 1 insertions, 2 deletions

diff --git a/ipv4.c b/ipv4.c
index 2e71278c..844c84b7 100644
--- a/ipv4.c
+++ b/ipv4.c
@@ -888,7 +888,6 @@ ipv4_buildroutes(struct dhcpcd_ctx *ctx)
 int
 ipv4_deladdr(struct ipv4_addr *addr, int keeparp)
 {
-	struct interface *ifp;
 	int r;
 	struct ipv4_state *state;
 	struct ipv4_addr *ap;
@@ -911,10 +910,10 @@ ipv4_deladdr(struct ipv4_addr *addr, int keeparp)
 		if (IPV4_MASK_EQ(ap, addr)) {
 			struct dhcp_state *dstate;
 
+			dstate = D_STATE(ap->iface);
 			TAILQ_REMOVE(&state->addrs, ap, next);
 			free(ap);
 
-			dstate = D_STATE(ifp);
 			if (dstate && dstate->addr == ap) {
 				dstate->added = 0;
 				dstate->addr = NULL;