[Bugs] [Bug 1288922] Use after free bug in notify_kernel_loop in fuse-bridge code

bugzilla at redhat.com bugzilla at redhat.com
Thu Dec 10 03:53:01 UTC 2015


https://bugzilla.redhat.com/show_bug.cgi?id=1288922



--- Comment #3 from Vijay Bellur <vbellur at redhat.com> ---
COMMIT: http://review.gluster.org/12887 committed in release-3.7 by Raghavendra
G (rgowdapp at redhat.com) 
------
commit a97ea63aaf4ee79bd6bb9759840fdaa43f37534c
Author: Pranith Kumar K <pkarampu at redhat.com>
Date:   Sun Dec 6 22:05:54 2015 +0530

    mount/fuse: Fix use-after-free crash

           Backport of http://review.gluster.com/12886

    fouh->len is accessed after 'node' is freed. Also 'rv' is int where as
    fouh->len is uint32, changed comparison to ssize_t variables.

    BUG: 1288922
    Change-Id: Ib5e22ce56a022740fcc09ce430ff1de31a8a45d6
    Signed-off-by: Pranith Kumar K <pkarampu at redhat.com>
    Reviewed-on: http://review.gluster.org/12887
    Tested-by: Gluster Build System <jenkins at build.gluster.com>
    Tested-by: NetBSD Build System <jenkins at build.gluster.org>
    Reviewed-by: Raghavendra G <rgowdapp at redhat.com>

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=p8FL4Eb5Lh&a=cc_unsubscribe


More information about the Bugs mailing list