View Issue Details

IDProjectCategoryView StatusLast Update
0002369GNUnettransport servicepublic2012-06-02 19:15
ReporterMatthias Wachs Assigned ToMatthias Wachs  
PrioritynormalSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.9.3Fixed in Version0.9.3 
Summary0002369: Use after free in GST_blacklist_test_allowed (gnunet-service-transport_blacklist.c:758)
DescriptionRevision 21560 on gnunet9@gnunet.org

==11278== Invalid read of size 1
==11278== at 0x402C0AB: bcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==11278== by 0x5253438: GNUNET_CONTAINER_multihashmap_get (container_multihashmap.c:173)
==11278== by 0x40A6F9: handle_test_blacklist_cont (gnunet-service-transport_neighbours.c:1733)
==11278== by 0x405BC4: GST_blacklist_test_allowed (gnunet-service-transport_blacklist.c:758)
==11278== by 0x40A39F: check_blacklist (gnunet-service-transport_neighbours.c:1954)
==11278== by 0x40BB39: GST_neighbours_handle_connect (gnunet-service-transport_neighbours.c:2059)
==11278== by 0x403F67: plugin_env_receive_callback (gnunet-service-transport.c:260)
==11278== by 0xA258FF6: handle_tcp_data (plugin_transport_tcp.c:1940)
==11278== by 0x526E7B1: GNUNET_SERVER_inject (server.c:891)
==11278== by 0x526F87F: client_message_tokenizer_callback (server.c:1098)
==11278== by 0x5270061: GNUNET_SERVER_mst_receive (server_mst.c:224)
==11278== by 0x526F2C7: process_mst (server.c:961)
==11278== Address 0xa6ff788 is 312 bytes inside a block of size 424 free'd
==11278== at 0x4028AAE: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==11278== by 0xA25659C: session_disconnect_it (plugin_transport_tcp.c:1362)
==11278== by 0x5253AAC: GNUNET_CONTAINER_multihashmap_get_multiple (container_multihashmap.c:485)
==11278== by 0xA257A06: tcp_plugin_disconnect (plugin_transport_tcp.c:1389)
==11278== by 0x408CE4: free_neighbour (gnunet-service-transport_neighbours.c:889)
==11278== by 0x40BB9C: GST_neighbours_handle_connect (gnunet-service-transport_neighbours.c:2055)
==11278== by 0x403F67: plugin_env_receive_callback (gnunet-service-transport.c:260)
==11278== by 0xA258FF6: handle_tcp_data (plugin_transport_tcp.c:1940)
==11278== by 0x526E7B1: GNUNET_SERVER_inject (server.c:891)
==11278== by 0x526F87F: client_message_tokenizer_callback (server.c:1098)
==11278== by 0x5270061: GNUNET_SERVER_mst_receive (server_mst.c:224)
==11278== by 0x526F2C7: process_mst (server.c:961)
Additional Informationbug that solved the issue: 0002374
TagsNo tags attached.

Relationships

duplicate of 0002367 closedMatthias Wachs Use after free setup_neighbour (gnunet-service-transport_neighbours.c:1589) 

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2012-05-23 09:56 Matthias Wachs New Issue
2012-05-23 09:56 Matthias Wachs Status new => assigned
2012-05-23 09:56 Matthias Wachs Assigned To => Matthias Wachs
2012-05-23 13:37 Matthias Wachs Relationship added related to 0002367
2012-05-23 13:38 Matthias Wachs Relationship deleted related to 0002367
2012-05-23 13:38 Matthias Wachs Relationship added duplicate of 0002367
2012-05-24 13:46 Matthias Wachs Status assigned => resolved
2012-05-24 13:46 Matthias Wachs Resolution open => fixed
2012-05-24 13:46 Matthias Wachs Additional Information Updated
2012-05-27 18:33 Christian Grothoff Fixed in Version => 0.9.3
2012-05-27 18:33 Christian Grothoff Target Version => 0.9.3
2012-06-02 19:15 Christian Grothoff Status resolved => closed