diff options
| author | jilles <jilles@FreeBSD.org> | 2016-01-27 22:56:04 +0000 |
|---|---|---|
| committer | jilles <jilles@FreeBSD.org> | 2016-01-27 22:56:04 +0000 |
| commit | 42ee9ca9933fb815ce7d9098f10bad6fe38c69b4 (patch) | |
| tree | 6566abe70454f4bb516d4bc56029438a4af29a18 /secure/lib/libcrypt | |
| parent | 3e03b75dcaf65a439918ff675adb4717c6c13c6c (diff) | |
| download | FreeBSD-src-42ee9ca9933fb815ce7d9098f10bad6fe38c69b4.zip FreeBSD-src-42ee9ca9933fb815ce7d9098f10bad6fe38c69b4.tar.gz | |
MFC r294565: sem: Don't free nameinfo that is still in list when open()
fails.
This bug could be reproduced easily by calling sem_open() with O_CREAT |
O_EXCL on a semaphore that is already open in the process. The struct
sem_nameinfo would be freed while still in sem_list and later calls to
sem_open() or sem_close() could access freed memory.
PR: 206396
Diffstat (limited to 'secure/lib/libcrypt')
0 files changed, 0 insertions, 0 deletions
