OpenAFS Master Repository branch, openafs-stable-1_4_x, updated. openafs-stable-1_4_12pre1-4-g26ffbd3

Gerrit Code Review gerrit@openafs.org
Sat, 16 Jan 2010 08:08:13 -0800 (PST)


The following commit has been merged in the openafs-stable-1_4_x branch:
commit 26ffbd3f1c07420796c772e821786cfa4bcc0bc5
Author: Simon Wilkinson <sxw@inf.ed.ac.uk>
Date:   Sat Jan 16 15:52:58 2010 +0000

    Don't double free call structure
    
    If the rx_Read() of the number of bytes in the FetchData64 response
    fails, then it sets code, and disposes of the call structure. However,
    the length safety check that was added in
    c7b92a3018044f7aca4d9a77644e5c06ef64d1e9 executes regardless of whether
    code is set, and the call has already been freed. So we end up calling
    rx_Error with a NULL call structure, and panic.
    
    (pulled up from 806423be3c55f3de91c2b836d2088eeb0f4e4665)
    
    Change-Id: Ia1ee4ab9c794db9337e4eb7b5b5980c8a57cef0b
    Reviewed-on: http://gerrit.openafs.org/1113
    Reviewed-by: Derrick Brashear <shadow@dementia.org>
    Tested-by: Derrick Brashear <shadow@dementia.org>

 src/afs/afs_dcache.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

-- 
OpenAFS Master Repository