]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
projects / FreeBSD / stable / 10.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bc0bd77) | patch
MFC r262309:
authormjg <mjg@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 24 Feb 2014 21:03:38 +0000 (21:03 +0000)
committermjg <mjg@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Mon, 24 Feb 2014 21:03:38 +0000 (21:03 +0000)
commit18b8415608622a226e662963bd50dbc07a57dd22
treec484e863879801a1dff8f9da9ad34d4a4f264836tree | snapshot
parentbc0bd7761068e9701d67325a978860f043d04482commit | diff
MFC r262309:

Fix a race between kern_proc_{o,}filedesc_out and fdescfree leading
to use-after-free.

fdescfree proceeds to free file pointers once fd_refcnt reaches 0, but
kern_proc_{o,}filedesc_out only checked for hold count.

git-svn-id: svn://svn.freebsd.org/base/stable/10@262458 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/kern/kern_descrip.c diff | blob | history
10-STABLE