Project

General

Profile

Actions

Bug #5182

closed

use after free in blkdev

Added by Hans Rosenfeld about 7 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Start date:
2014-09-18
Due date:
% Done:

100%

Estimated time:
Difficulty:
Bite-size
Tags:
needs-triage
Gerrit CR:

Description

In bd_sched(), a bd_xfer_impl_t is passed to list_remove() a few lines after it was passed to bd_xfer_free().

Actions #1

Updated by Electric Monk about 7 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

git commit dd3928f816b8d87f7ecc81d6ec1eec1257ed0cda

commit  dd3928f816b8d87f7ecc81d6ec1eec1257ed0cda
Author: Hans Rosenfeld <hans.rosenfeld@nexenta.com>
Date:   2014-09-18T20:38:53.000Z

    5182 use after free in blkdev
    Reviewed by: Marcel Telka <marcel@telka.sk>
    Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>
    Reviewed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net>
    Reviewed by: Garrett D'Amore <garrett@damore.org>
    Approved by: Dan McDonald <danmcd@omniti.com>

Actions

Also available in: Atom PDF