Re: [Qemu-devel] A use-after-free in slirp

2017-08-24 Thread Philippe Mathieu-Daudé
Hi Samuel, On 08/24/2017 08:42 PM, Samuel Thibault wrote: Hello, Thanks for the reproducer you sent me offline. Here is a fix which makes a lot of sense and fixes the reproducer. Could you try it with your whole testcase? Could somebody also review the patch? Your patch looks correct. It

Re: [Qemu-devel] A use-after-free in slirp

2017-08-24 Thread Samuel Thibault
Hello, Thanks for the reproducer you sent me offline. Here is a fix which makes a lot of sense and fixes the reproducer. Could you try it with your whole testcase? Could somebody also review the patch? Samuel commit 1a3a763509fad895c907e6978ea034a5c19ee370 Author: Samuel Thibault

Re: [Qemu-devel] A use-after-free in slirp

2017-08-24 Thread P J P
Hello Samuel, +-- On Wed, 23 Aug 2017, Samuel Thibault wrote --+ | The paste is not available any more. Is it really very large? It's usually | really better to just send it by mail, so it's archived in the mailing list | etc. Yes, stack-trace was quite long. === ==2704==ERROR:

Re: [Qemu-devel] A use-after-free in slirp

2017-08-23 Thread Samuel Thibault
Hello, P J P, on jeu. 03 août 2017 17:45:06 +0530, wrote: > ==31922==ERROR: AddressSanitizer: heap-use-after-free on address > 0x6141ff8c at pc 0x56485de28ea0 bp 0x7f00f44fc950 sp 0x7f00f44fc940 > READ of size 4 at 0x6141ff8c thread T2 > #0 0x56485de28e9f in if_start slirp/if.c:230 >

[Qemu-devel] A use-after-free in slirp

2017-08-03 Thread P J P
Hello Jan, Samuel Wjjzhang(CC'd) has reported a use-after-free issue which seems to occur while responding to a packet, after the socket has been closed by another thread. === ==31922==ERROR: AddressSanitizer: heap-use-after-free on address 0x6141ff8c at pc 0x56485de28ea0 bp