diff options
| author | Li RongQing <roy.qing.li@gmail.com> | 2014-09-07 18:10:51 +0800 |
|---|---|---|
| committer | Ilya Dryomov <idryomov@redhat.com> | 2014-10-14 21:03:21 +0400 |
| commit | 589506f1e7f135943bcd34903bcdcf1fdaf00549 (patch) | |
| tree | e592366a1c1d59e8ca1085fd13a06ebc506420d1 /net/ceph/ceph_common.c | |
| parent | dc220db03f15c9875aa09c36beba582f20c76be1 (diff) | |
| download | linux-stable-589506f1e7f135943bcd34903bcdcf1fdaf00549.tar.gz linux-stable-589506f1e7f135943bcd34903bcdcf1fdaf00549.tar.bz2 linux-stable-589506f1e7f135943bcd34903bcdcf1fdaf00549.zip | |
libceph: fix a use after free issue in osdmap_set_max_osd
If the state variable is krealloced successfully, map->osd_state will be
freed, once following two reallocation failed, and exit the function
without resetting map->osd_state, map->osd_state become a wild pointer.
fix it by resetting them after krealloc successfully.
Signed-off-by: Li RongQing <roy.qing.li@gmail.com>
Signed-off-by: Ilya Dryomov <ilya.dryomov@inktank.com>
Diffstat (limited to 'net/ceph/ceph_common.c')
0 files changed, 0 insertions, 0 deletions