Opened 8 years ago
Closed 8 years ago
#13375 closed bug (no change required)
[PATCH] system/boot/loader/vfs.cpp: fix use after free
Reported by: | mt | Owned by: | axeld |
---|---|---|---|
Priority: | normal | Milestone: | Unscheduled |
Component: | System/Boot Loader | Version: | R1/Development |
Keywords: | Cc: | ||
Blocked By: | Blocking: | ||
Platform: | All |
Description
Since Node::Close() calls Node::Release() [1], dir->directory->Close() at line 1206 [2] could delete dir->directory itself, and then dir->directory may be used after free at next line 1207.
[1] http://cgit.haiku-os.org/haiku/tree/src/system/boot/loader/vfs.cpp#n111
[2] http://cgit.haiku-os.org/haiku/tree/src/system/boot/loader/vfs.cpp#n1206
Attachments (2)
Change History (4)
by , 8 years ago
Attachment: | 0033-vfs.cpp-fix-use-after-free.patch added |
---|
comment:1 by , 8 years ago
patch: | 0 → 1 |
---|
by , 8 years ago
Attachment: | report-50f072.html added |
---|
comment:2 by , 8 years ago
Resolution: | → no change required |
---|---|
Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
Report by Clang Static Analyzer