Project

General

Profile

Actions

Bug #12073

closed

loader: devopen dereference after free

Added by Toomas Soome over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
bootloader
Start date:
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:
Gerrit CR:
External Bug:

Description

zfs device open will release dev, so we can not use dev after calling dv_open().

Testing done: I found this issue with libumem (0xdeadbeef), fixed with patch applied.

Actions #1

Updated by Toomas Soome over 3 years ago

  • Description updated (diff)
Actions #2

Updated by Electric Monk over 3 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 90 to 100

git commit adbb29bd77dbfbbf129b5e3bd6ccc5bd4074fd79

commit  adbb29bd77dbfbbf129b5e3bd6ccc5bd4074fd79
Author: Toomas Soome <tsoome@me.com>
Date:   2019-12-18T17:29:00.000Z

    12073 loader: devopen dereference after free
    Reviewed by: Matthias Scheler <mscheler@tintri.com>
    Approved by: Dan McDonald <danmcd@joyent.com>

Actions

Also available in: Atom PDF