Re: [PATCH 1/2] libmultipath: fix use-after-free in uev_add_path

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2021-02-08 at 23:19 -0600, Benjamin Marzinski wrote:
> if ev_remove_path() returns success the path has very likely been
> deleted. However, if pathinfo() returned something besides
> PATHINFO_OK,
> but ev_remove_path() succeeded, uev_add_path() was still accessing
> the
> the path afterwards, which would likely cause a use-after-free error.
> Insted, uev_add_path() should only continue to access the path if
> ev_remove_path() didn't succeed.
> 
> Signed-off-by: Benjamin Marzinski <bmarzins@xxxxxxxxxx>

Reviewed-by: Martin Wilck <mwilck@xxxxxxxx>


-- 
Dr. Martin Wilck <mwilck@xxxxxxxx>, Tel. +49 (0)911 74053 2107
SUSE Software Solutions Germany GmbH
HRB 36809, AG Nürnberg GF: Felix Imendörffer



--
dm-devel mailing list
dm-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/dm-devel





[Index of Archives]     [DM Crypt]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite Discussion]     [KDE Users]     [Fedora Docs]

  Powered by Linux