]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
projects / FreeBSD / stable / 10.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 05ee32e) | patch
MFC r298669:
authorngie <ngie@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Fri, 13 May 2016 08:36:33 +0000 (08:36 +0000)
committerngie <ngie@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Fri, 13 May 2016 08:36:33 +0000 (08:36 +0000)
commitb934b5e5324587afc1edd164d57487d7fbf7bdd4
treee4578d17192cee1cd0019b836b7da222a4c9229btree | snapshot
parent05ee32e5841356823d89807ba9ce4b38b75e527acommit | diff
MFC r298669:
r298669 (by cem):

iscsi_initiator(4): Fix use-after-free, double-free

ism_stop() already destroys and frees 'sp', including a call to ic_destroy().
Don't dereference 'sp' after ism_stop() and don't invoke ic_destroy() on the
freed memory either.

CIDs: 1006109, 1304861

git-svn-id: svn://svn.freebsd.org/base/stable/10@299621 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/dev/iscsi_initiator/iscsi.c diff | blob | history
10-STABLE