Displaying 1 result from an estimated 1 matches for "smb_do_alloc_request".
2003 May 22
0
use-after-free in smbfs on 2.5.69-mm5
...or in check_poison_obj(): cache `smb_request': object was modified after freeing
Call Trace:
[<c013d61d>] __slab_error+0x21/0x28
[<ec9966b5>] +0x2b95/0x30e0 [smbfs]
[<c013d8cc>] check_poison_obj+0x174/0x180
[<c013f287>] kmem_cache_alloc+0xaf/0x150
[<ec992d2e>] smb_do_alloc_request+0x1e/0xb4 [smbfs]
[<ec992d2e>] smb_do_alloc_request+0x1e/0xb4 [smbfs]
[<ec992de4>] smb_alloc_request+0x20/0x2c [smbfs]
[<ec98c439>] smb_proc_open+0x3d/0xfc [smbfs]
[<ec98cae1>] smb_proc_readX+0xe5/0xf4 [smbfs]
[<ec98c54e>] smb_open+0x56/0xcc [smbfs]
[<ec991889...