]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r320216: Fix use-after-free introduced in r300388.
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sun, 25 Jun 2017 05:46:03 +0000 (05:46 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sun, 25 Jun 2017 05:46:03 +0000 (05:46 +0000)
commit0af011a0992dfe4f739a8ac49416e010127a64f0
treec0a309e2d17fd4215f55a9bb41238b7cd28f29be
parentea83dc0aa2f8cf9c633e4eeeadfe64e50053afd0
MFC r320216: Fix use-after-free introduced in r300388.

In r300388, endnetconfig() was called on nc_handle which would release
the associated netconfig structure, which means tmpnconf->nc_netid
would be a use-after-free.

Solve this by doing endnetconfig() in return paths instead.

Reported by: jemalloc via kevlo
Reviewed by: cem, ngie (earlier version)

git-svn-id: svn://svn.freebsd.org/base/stable/10@320325 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
lib/libc/rpc/rpcb_clnt.c