Author: marcel
Date: Wed Dec 18 04:52:30 2013
New Revision: 259540
URL: http://svnweb.freebsd.org/changeset/base/259540
Log:
Clear f_rabuf after freeing the memory it points to. This prevents a
possible double free.
Obtained from: Juniper Networks, Inc.
Modified:
head/lib/libstand/close.c
Modified: head/lib/libstand/close.c
==============================================================================
--- head/lib/libstand/close.c Wed Dec 18 04:44:38 2013 (r259539)
+++ head/lib/libstand/close.c Wed Dec 18 04:52:30 2013 (r259540)
@@ -75,8 +75,10 @@ close(int fd)
errno = EBADF;
return (-1);
}
- if (f->f_rabuf != NULL)
+ if (f->f_rabuf != NULL) {
free(f->f_rabuf);
+ f->f_rabuf = NULL;
+ }
if (!(f->f_flags & F_RAW) && f->f_ops)
err1 = (f->f_ops->fo_close)(f);
if (!(f->f_flags & F_NODEV) && f->f_dev)
_______________________________________________
svn-src-head@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"
