[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-hackers
Subject:    CFR: FireWire: Don't allow a tlabel to reference an xfer after free
From:       Will Andrews <will () firepipe ! net>
Date:       2013-03-28 17:25:08
Message-ID: CADBaqmgJY=N0bodBA+kyjkQuNnM+qvLML1UZvJU_JY=PLwg5hQ () mail ! gmail ! com
[Download RAW message or body]

Diff: http://people.freebsd.org/~will/patches/fix-fwmem-use-after-free.diff

From the commit log:

	FireWire: Don't allow a tlabel to reference an xfer after free.
	
	sys/dev/firewire/firewire.c:
	- fw_xfer_unload(): Since we are about to free this xfer, call
	  fw_tl_free() to remove the xfer from its tlabel's list, if
	  it has a tlabel.
	- In every occasion when a xfer is removed from a tlabel's list,
	  reset xfer->tl to -1 while holding fc->tlabel_lock, so that the
	  xfer isn't mis-identified as belonging to a tlabel.


Thanks,
--Will.
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
[prev in list] [next in list] [prev in thread] [next in thread]