git.samba.org / metze / samba / wip.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9f9c5d3) | patch
s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv().
authorJeremy Allison <jra@samba.org>
Wed, 29 Nov 2017 17:21:30 +0000 (09:21 -0800)
committerJeremy Allison <jra@samba.org>
Thu, 30 Nov 2017 04:47:10 +0000 (05:47 +0100)
commit5c8032b6b8ce4439b3ef8f43a62a419f081eb787
treef0f784eebc8adfc5284b0bceaf5e90b57de88d70tree
parent9f9c5d33c434b192d38a9758067fb0513041c0f0commit | diff
s3: libsmb: Fix valgrind read-after-free error in cli_smb2_close_fnum_recv().

cli_smb2_close_fnum_recv() uses tevent_req_simple_recv_ntstatus(req), which
frees req, then uses the state pointer which was owned by req.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13171

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Ralph Böhme <slow@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Thu Nov 30 05:47:12 CET 2017 on sn-devel-144
source3/libsmb/cli_smb2_fnum.c diff | blob | history
Work in progress branches