OpenAFS Master Repository branch, master, updated. openafs-devel-1_5_68-104-g806423b
Gerrit Code Review
gerrit@openafs.org
Sat, 16 Jan 2010 07:49:46 -0800 (PST)
The following commit has been merged in the master branch:
commit 806423be3c55f3de91c2b836d2088eeb0f4e4665
Author: Simon Wilkinson <sxw@inf.ed.ac.uk>
Date: Sat Jan 16 15:35:34 2010 +0000
Don't double free call structure
If the rx_Read() of the number of bytes in the FetchData64 response
fails, then it sets code, and disposes of the call structure. However,
the length safety check that was added in
c7b92a3018044f7aca4d9a77644e5c06ef64d1e9 executes regardless of whether
code is set, and the call has already been freed. So we end up calling
rx_Error with a NULL call structure, and panic.
Change-Id: Ia2e341b7a9a2ddc1d656e8b8a31698c0d1771d5e
Reviewed-on: http://gerrit.openafs.org/1112
Reviewed-by: Jeffrey Altman <jaltman@openafs.org>
Reviewed-by: Derrick Brashear <shadow@dementia.org>
Tested-by: Derrick Brashear <shadow@dementia.org>
src/afs/afs_fetchstore.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
--
OpenAFS Master Repository