Date: Sun, 26 Apr 2015 11:07:14 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 199705] [patch] [geom] use-after-free bug in geli Message-ID: <bug-199705-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199705 Bug ID: 199705 Summary: [patch] [geom] use-after-free bug in geli Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Only Me Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: luke.tw@gmail.com Keywords: patch Created attachment 156004 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=156004&action=edit patch for geli In g_eli_auth_run() and g_eli_crypto_run(), crypto_dispatch() sends crypto request. After the last child bio is served, the bp is freed in g_vfs_done(). Then in g_eli_auth_run() and g_eli_crypto_run(), there are uses of the freed bp if (bp->bio_error == 0) bp->bio_error = error; -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-199705-8>