|
 |
d84cf8 |
From ffd428d07036531b7ed98c7393b87490aaa223ec Mon Sep 17 00:00:00 2001
|
|
|
d84cf8 |
From: Niels de Vos <ndevos@redhat.com>
|
|
|
d84cf8 |
Date: Fri, 3 May 2019 09:18:31 +0200
|
|
|
d84cf8 |
Subject: [PATCH 437/449] glusterd: prevent use-after-free in
|
|
|
d84cf8 |
glusterd_op_ac_send_brick_op()
|
|
|
d84cf8 |
|
|
|
d84cf8 |
Coverity reported that GF_FREE(req_ctx) could be called 2x on req_ctx.
|
|
|
d84cf8 |
|
|
|
d84cf8 |
> upstream patch link: https://review.gluster.org/#/c/glusterfs/+/22656/
|
|
|
d84cf8 |
> Change-Id: I9120686e5920de8c27688e10de0db6aa26292064
|
|
|
d84cf8 |
> CID: 1401115
|
|
|
d84cf8 |
> Updates: bz#789278
|
|
|
d84cf8 |
> Signed-off-by: Niels de Vos <ndevos@redhat.com>
|
|
|
d84cf8 |
|
|
|
d84cf8 |
BUG: 1787310
|
|
|
d84cf8 |
Change-Id: I9120686e5920de8c27688e10de0db6aa26292064
|
|
|
d84cf8 |
Signed-off-by: Sanju Rakonde <srakonde@redhat.com>
|
|
|
d84cf8 |
Reviewed-on: https://code.engineering.redhat.com/gerrit/202619
|
|
|
d84cf8 |
Tested-by: RHGS Build Bot <nigelb@redhat.com>
|
|
|
d84cf8 |
Reviewed-by: Sunil Kumar Heggodu Gopala Acharya <sheggodu@redhat.com>
|
|
|
d84cf8 |
---
|
|
|
d84cf8 |
xlators/mgmt/glusterd/src/glusterd-op-sm.c | 3 +--
|
|
|
d84cf8 |
1 file changed, 1 insertion(+), 2 deletions(-)
|
|
|
d84cf8 |
|
|
|
d84cf8 |
diff --git a/xlators/mgmt/glusterd/src/glusterd-op-sm.c b/xlators/mgmt/glusterd/src/glusterd-op-sm.c
|
|
|
d84cf8 |
index 46fc607..1e84f5f 100644
|
|
|
d84cf8 |
--- a/xlators/mgmt/glusterd/src/glusterd-op-sm.c
|
|
|
d84cf8 |
+++ b/xlators/mgmt/glusterd/src/glusterd-op-sm.c
|
|
|
d84cf8 |
@@ -7575,7 +7575,6 @@ glusterd_op_ac_send_brick_op(glusterd_op_sm_event_t *event, void *ctx)
|
|
|
d84cf8 |
if (op_errstr == NULL)
|
|
|
d84cf8 |
gf_asprintf(&op_errstr, OPERRSTR_BUILD_PAYLOAD);
|
|
|
d84cf8 |
opinfo.op_errstr = op_errstr;
|
|
|
d84cf8 |
- GF_FREE(req_ctx);
|
|
|
d84cf8 |
goto out;
|
|
|
d84cf8 |
}
|
|
|
d84cf8 |
}
|
|
|
d84cf8 |
@@ -7594,7 +7593,7 @@ glusterd_op_ac_send_brick_op(glusterd_op_sm_event_t *event, void *ctx)
|
|
|
d84cf8 |
}
|
|
|
d84cf8 |
|
|
|
d84cf8 |
out:
|
|
|
d84cf8 |
- if (ret && req_ctx && free_req_ctx)
|
|
|
d84cf8 |
+ if (ret && free_req_ctx)
|
|
|
d84cf8 |
GF_FREE(req_ctx);
|
|
|
d84cf8 |
gf_msg_debug(this->name, 0, "Returning with %d", ret);
|
|
|
d84cf8 |
|
|
|
d84cf8 |
--
|
|
|
d84cf8 |
1.8.3.1
|
|
|
d84cf8 |
|