Date: Wed, 18 Dec 2013 04:52:30 +0000 (UTC) From: Marcel Moolenaar <marcel@FreeBSD.org> To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r259540 - head/lib/libstand Message-ID: <201312180452.rBI4qURt019169@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: marcel Date: Wed Dec 18 04:52:30 2013 New Revision: 259540 URL: http://svnweb.freebsd.org/changeset/base/259540 Log: Clear f_rabuf after freeing the memory it points to. This prevents a possible double free. Obtained from: Juniper Networks, Inc. Modified: head/lib/libstand/close.c Modified: head/lib/libstand/close.c ============================================================================== --- head/lib/libstand/close.c Wed Dec 18 04:44:38 2013 (r259539) +++ head/lib/libstand/close.c Wed Dec 18 04:52:30 2013 (r259540) @@ -75,8 +75,10 @@ close(int fd) errno = EBADF; return (-1); } - if (f->f_rabuf != NULL) + if (f->f_rabuf != NULL) { free(f->f_rabuf); + f->f_rabuf = NULL; + } if (!(f->f_flags & F_RAW) && f->f_ops) err1 = (f->f_ops->fo_close)(f); if (!(f->f_flags & F_NODEV) && f->f_dev)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201312180452.rBI4qURt019169>