- **status**: review --> fixed
- **Comment**:
commit 20a16ee0e07ec589d79b1204f511384bd6a9c9d7
Author: Gary Lee <gary....@dektech.com.au>
Date: Thu Oct 26 13:34:42 2017 +1100
amfnd: store pid before sending event [#2650]
The event may be processed and pm_rec
deleted by the main thread, before it is
read here.
---
** [tickets:#2650] amfnd: invalid read in mon.cc**
**Status:** fixed
**Milestone:** 5.17.10
**Created:** Mon Oct 23, 2017 02:59 AM UTC by Gary Lee
**Last Updated:** Mon Oct 23, 2017 03:19 AM UTC
**Owner:** Gary Lee
==478== Invalid read of size 8
==478== at 0x1446B0: avnd_send_pid_exit_evt (mon.cc:274)
==478== by 0x1446B0: avnd_mon_pids (mon.cc:325)
==478== by 0x1446B0: avnd_mon_process(void*) (mon.cc:355)
==478== by 0x5EBF6D9: start_thread (pthread_create.c:456)
==478== by 0x61DED7E: clone (clone.S:105)
==478== Address 0x8c04558 is 24 bytes inside a block of size 72 free'd
==478== at 0x4C2F25B: operator delete(void*) (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==478== by 0x133EF8: avnd_pm_rec_free(ncs_db_link_list_node*) (cpm.cc:84)
==478== by 0x56BDD4A: ncs_db_link_list_del (ncsdlib.c:146)
==478== by 0x134025: avnd_comp_pm_rec_del(avnd_cb_tag*, avnd_comp_tag*,
avnd_pm_rec*) (cpm.cc:138)
==478== by 0x144B69: avnd_evt_pid_exit_evh(avnd_cb_tag*, avnd_evt_tag*)
(mon.cc:403)
==478== by 0x141C41: avnd_evt_process (main.cc:658)
==478== by 0x141C41: avnd_main_process() (main.cc:610)
==478== by 0x115D81: main (main.cc:203)
==478== Block was alloc'd at
==478== at 0x4C2E19F: operator new(unsigned long) (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==478== by 0x134332: avnd_comp_new_rsrc_mon(avnd_cb_tag*, avnd_comp_tag*,
avsv_amf_pm_start_param_tag*, SaAisErrorT*) (cpm.cc:329)
==478== by 0x134470: avnd_comp_pm_start_process(avnd_cb_tag*,
avnd_comp_tag*, avsv_amf_pm_start_param_tag*, SaAisErrorT*) (cpm.cc:269)
==478== by 0x134B43: avnd_evt_ava_pm_start_evh(avnd_cb_tag*, avnd_evt_tag*)
(cpm.cc:419)
==478== by 0x141C41: avnd_evt_process (main.cc:658)
==478== by 0x141C41: avnd_main_process() (main.cc:610)
==478== by 0x115D81: main (main.cc:203)
---
Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Opensaf-tickets mailing list
Opensaf-tickets@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
