Displaying 2 results from an estimated 2 matches for "e79042c".
Did you mean:
  679042
  
2017 Dec 04
1
[nbdkit PATCH] nbd: Fix sporadic use-after-free
...---
Perhaps I should also add more comments to the code about transfer of
ownership of 'trans' between threads?
 plugins/nbd/nbd.c | 43 ++++++++++++++++++++++++++++++-------------
 1 file changed, 30 insertions(+), 13 deletions(-)
diff --git a/plugins/nbd/nbd.c b/plugins/nbd/nbd.c
index e79042c..9d40e87 100644
--- a/plugins/nbd/nbd.c
+++ b/plugins/nbd/nbd.c
@@ -227,6 +227,26 @@ nbd_mark_dead (struct handle *h)
   return -1;
 }
+/* Find and remove the transaction corresponding to cookie from the list. */
+static struct transaction *
+find_trans_by_cookie (struct handle *h, uint64_t cookie...
2017 Dec 02
1
[nbdkit PATCH v2] nbd: Fix memory leak
...by: Richard W.M. Jones <rjones@redhat.com>
Fixes: 7f5bb9bf13f041ea7702bda557d9dd668bc3423a
Signed-off-by: Eric Blake <eblake@redhat.com>
---
 plugins/nbd/nbd.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/plugins/nbd/nbd.c b/plugins/nbd/nbd.c
index b844bf5..e79042c 100644
--- a/plugins/nbd/nbd.c
+++ b/plugins/nbd/nbd.c
@@ -311,6 +311,8 @@ nbd_reply_raw (struct handle *h, int *fd)
   struct reply rep;
   struct transaction **ptr;
   struct transaction *trans;
+  void *buf;
+  uint32_t count;
   *fd = -1;
   if (read_full (h->fd, &rep, sizeof rep) <...