]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 45c1d15) | patch
librbd: fix use-after-free on ictx in list_descendants()
authorWang ShuaiChao <wangshuaich@chinatelecom.cn>
Tue, 7 Sep 2021 08:43:11 +0000 (16:43 +0800)
committerIlya Dryomov <idryomov@gmail.com>
Sun, 13 Feb 2022 15:59:28 +0000 (16:59 +0100)
commit5e5ff9e80d46c21c256b01fddba979ba7b7ab71f
treeda3a9d0c4ed0e922aafa77f72ee94883f1343b8ctree | snapshot
parent45c1d15e01d9ebcfec68908acbf6a877f3e43fb7commit | diff
librbd: fix use-after-free on ictx in list_descendants()

Ictx is deleted when "ictx->state->open()" and "ictx->state->close()"
fail, and then "lderr(ictx->cct)" crashes.

Fixes: https://tracker.ceph.com/issues/52522
Signed-off-by: Wang ShuaiChao <wangshuaich@chinatelecom.cn>
(cherry picked from commit fa5d61ee5144f67cba53d54d36013614183e53a3)
src/librbd/api/Image.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.