FreeBSD Bugzilla – Attachment 224930 Details for
Bug 255866
[PATCH] dev/ocs_fc: Fix a use after free in ocs_sport_free
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
add a new variable ocs
0001-dev-ocs_fc-uaf-ocs_sport_free (text/plain), 864 bytes, created by
lylgood
on 2021-05-14 11:00:56 UTC
(
hide
)
Description:
add a new variable ocs
Filename:
MIME Type:
Creator:
lylgood
Created:
2021-05-14 11:00:56 UTC
Size:
864 bytes
patch
obsolete
>diff --git a/sys/dev/ocs_fc/ocs_sport.c b/sys/dev/ocs_fc/ocs_sport.c >index 71fe350311f7..68b41f2de9fc 100644 >--- a/sys/dev/ocs_fc/ocs_sport.c >+++ b/sys/dev/ocs_fc/ocs_sport.c >@@ -213,6 +213,7 @@ void > ocs_sport_free(ocs_sport_t *sport) > { > ocs_domain_t *domain; >+ ocs_t *ocs; > ocs_node_group_dir_t *node_group_dir; > ocs_node_group_dir_t *node_group_dir_next; > int post_all_free = FALSE; >@@ -255,6 +256,7 @@ ocs_sport_free(ocs_sport_t *sport) > ocs_sport_unlock(sport); > ocs_domain_unlock(domain); > >+ ocs = domain->ocs; > if (post_all_free) { > ocs_domain_post_event(domain, OCS_EVT_ALL_CHILD_NODES_FREE, NULL); > } >@@ -263,7 +265,7 @@ ocs_sport_free(ocs_sport_t *sport) > ocs_lock_free(&sport->node_group_lock); > ocs_scsi_sport_deleted(sport); > >- ocs_free(domain->ocs, sport, sizeof(*sport)); >+ ocs_free(ocs, sport, sizeof(*sport)); > > } > }
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=224930">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 255866
: 224930 |
225300