View Issue Details

IDProjectCategoryView StatusLast Update
0003161GNUnetDV service or transportpublic2013-12-24 20:54
ReporterChristian Grothoff Assigned ToChristian Grothoff  
PrioritynormalSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.10.0Fixed in Version0.10.0 
Summary0003161: use after free in DV
Description==22902== Invalid read of size 8
==22902== at 0x10C3E2: cull_routes (gnunet-service-dv.c:1163)
==22902== by 0x5685705: GNUNET_CONTAINER_multipeermap_iterate (container_multipeermap.c:361)
==22902== by 0x10C535: handle_direct_disconnect (gnunet-service-dv.c:1185)
==22902== by 0x10C82A: handle_ats_update (gnunet-service-dv.c:1292)
==22902== by 0x4E3C292: process_pi_message (ats_api_performance.c:382)
==22902== by 0x4E3CFE1: process_ats_message (ats_api_performance.c:554)
==22902== by 0x566D619: receive_task (client.c:589)
==22902== by 0x56ABF10: run_ready (scheduler.c:593)
==22902== by 0x56AC862: GNUNET_SCHEDULER_run (scheduler.c:808)
==22902== by 0x56BB65F: GNUNET_SERVICE_run (service.c:1478)
==22902== by 0x10F13C: main (gnunet-service-dv.c:2083)
==22902== Address 0x6ee2800 is 0 bytes inside a block of size 48 free'd
==22902== at 0x4C2A74C: free (vg_replace_malloc.c:468)
==22902== by 0x5670558: GNUNET_xfree_ (common_allocation.c:236)
==22902== by 0x10B639: handle_direct_connect (gnunet-service-dv.c:876)
==22902== by 0x10C878: handle_ats_update (gnunet-service-dv.c:1301)
==22902== by 0x4E3C292: process_pi_message (ats_api_performance.c:382)
==22902== by 0x4E3CFE1: process_ats_message (ats_api_performance.c:554)
==22902== by 0x566D619: receive_task (client.c:589)
==22902== by 0x56ABF10: run_ready (scheduler.c:593)
==22902== by 0x56AC862: GNUNET_SCHEDULER_run (scheduler.c:808)
==22902== by 0x56BB65F: GNUNET_SERVICE_run (service.c:1478)
==22902== by 0x10F13C: main (gnunet-service-dv.c:2083)
==22902==
Steps To Reproducemake check with valgrind
TagsNo tags attached.

Activities

Christian Grothoff

2013-12-07 23:13

manager   ~0007773

Should be fixed in 31166.

Issue History

Date Modified Username Field Change
2013-12-07 23:10 Christian Grothoff New Issue
2013-12-07 23:13 Christian Grothoff Note Added: 0007773
2013-12-07 23:13 Christian Grothoff Status new => resolved
2013-12-07 23:13 Christian Grothoff Fixed in Version => 0.10.0
2013-12-07 23:13 Christian Grothoff Resolution open => fixed
2013-12-07 23:13 Christian Grothoff Assigned To => Christian Grothoff
2013-12-24 20:54 Christian Grothoff Status resolved => closed