]> CyberLeo.Net >> Repos - FreeBSD/stable/9.git/commit
MFC r320216: Fix use-after-free introduced in r300388.
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sun, 25 Jun 2017 06:55:42 +0000 (06:55 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sun, 25 Jun 2017 06:55:42 +0000 (06:55 +0000)
commit0b076488a2005e8a848ceea102886976d5181a26
tree837397cd1b63306c7ddce58e988123915706fa45
parentd61225ead742670db06b1b22dbedb26c664d8c26
MFC r320216: Fix use-after-free introduced in r300388.

In r300388, endnetconfig() was called on nc_handle which would release
the associated netconfig structure, which means tmpnconf->nc_netid
would be a use-after-free.

Solve this by doing endnetconfig() in return paths instead.

Reported by: jemalloc via kevlo
Reviewed by: cem, ngie (earlier version)

git-svn-id: svn://svn.freebsd.org/base/stable/9@320326 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
lib/libc/rpc/rpcb_clnt.c