FreeBSD Bugzilla – Attachment 152442 Details for
Bug 197246
[patch] use-after-free bug in pipe_dtor()
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
patch for pipd_dtor()
pipe.patch (text/plain), 573 bytes, created by
luke.tw
on 2015-02-01 17:23:08 UTC
(
hide
)
Description:
patch for pipd_dtor()
Filename:
MIME Type:
Creator:
luke.tw
Created:
2015-02-01 17:23:08 UTC
Size:
573 bytes
patch
obsolete
>Index: sys/kern/sys_pipe.c >=================================================================== >--- sys/kern/sys_pipe.c (revision 277961) >+++ sys/kern/sys_pipe.c (working copy) >@@ -381,12 +381,11 @@ > > ino = dpipe->pipe_ino; > funsetown(&dpipe->pipe_sigio); >- pipeclose(dpipe); > if (dpipe->pipe_state & PIPE_NAMED) { >- dpipe = dpipe->pipe_peer; >- funsetown(&dpipe->pipe_sigio); >- pipeclose(dpipe); >+ funsetown(&dpipe->pipe_peer->pipe_sigio); >+ pipeclose(dpipe->pipe_peer); > } >+ pipeclose(dpipe); > if (ino != 0 && ino != (ino_t)-1) > free_unr(pipeino_unr, ino); > }
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=152442">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 197246
: 152442