Displaying 2 results from an estimated 2 matches for "e79042c".
Did you mean:
679042
2017 Dec 04
1
[nbdkit PATCH] nbd: Fix sporadic use-after-free
...---
Perhaps I should also add more comments to the code about transfer of
ownership of 'trans' between threads?
plugins/nbd/nbd.c | 43 ++++++++++++++++++++++++++++++-------------
1 file changed, 30 insertions(+), 13 deletions(-)
diff --git a/plugins/nbd/nbd.c b/plugins/nbd/nbd.c
index e79042c..9d40e87 100644
--- a/plugins/nbd/nbd.c
+++ b/plugins/nbd/nbd.c
@@ -227,6 +227,26 @@ nbd_mark_dead (struct handle *h)
return -1;
}
+/* Find and remove the transaction corresponding to cookie from the list. */
+static struct transaction *
+find_trans_by_cookie (struct handle *h, uint64_t cookie...
2017 Dec 02
1
[nbdkit PATCH v2] nbd: Fix memory leak
...by: Richard W.M. Jones <rjones@redhat.com>
Fixes: 7f5bb9bf13f041ea7702bda557d9dd668bc3423a
Signed-off-by: Eric Blake <eblake@redhat.com>
---
plugins/nbd/nbd.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/plugins/nbd/nbd.c b/plugins/nbd/nbd.c
index b844bf5..e79042c 100644
--- a/plugins/nbd/nbd.c
+++ b/plugins/nbd/nbd.c
@@ -311,6 +311,8 @@ nbd_reply_raw (struct handle *h, int *fd)
struct reply rep;
struct transaction **ptr;
struct transaction *trans;
+ void *buf;
+ uint32_t count;
*fd = -1;
if (read_full (h->fd, &rep, sizeof rep) <...