View Issue Details

IDProjectCategoryView StatusLast Update
0003212GNUnettransport servicepublic2024-05-03 13:58
ReporterChristian Grothoff Assigned ToChristian Grothoff  
PriorityurgentSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.10.0Fixed in Version0.10.0 
Summary0003212: use-after free in UDP
DescriptionDec 13 16:21:06-805010 transport-26165 WARNING External protocol violation detected at gnunet-service-transport.c:372.
==26165== Invalid read of size 8
==26165== at 0x404CFA: plugin_env_session_end (gnunet-service-transport.c:478)
==26165== by 0x8CF2005: udp_disconnect_session (plugin_transport_udp.c:1277)
==26165== by 0x8CF2249: disconnect_and_free_it (plugin_transport_udp.c:1322)
==26165== by 0x567DBF5: GNUNET_CONTAINER_multipeermap_get_multiple (container_multipeermap.c:791)
==26165== by 0x8CF231C: udp_disconnect (plugin_transport_udp.c:1345)
==26165== by 0x40D9E7: free_neighbour (gnunet-service-transport_neighbours.c:929)
==26165== by 0x413E69: master_task (gnunet-service-transport_neighbours.c:2727)
==26165== by 0x569FC5E: run_ready (scheduler.c:595)
==26165== by 0x56A04EB: GNUNET_SCHEDULER_run (scheduler.c:817)
==26165== by 0x56AE56A: GNUNET_SERVICE_run (service.c:1490)
==26165== by 0x406700: main (gnunet-service-transport.c:1005)
==26165== Address 0x6e41c90 is 0 bytes inside a block of size 40 free'd
==26165== at 0x4C2A74C: free (vg_replace_malloc.c:468)
==26165== by 0x5669B8E: GNUNET_xfree_ (common_allocation.c:239)
==26165== by 0x404CF5: plugin_env_session_end (gnunet-service-transport.c:484)
==26165== by 0x8CF2005: udp_disconnect_session (plugin_transport_udp.c:1277)
==26165== by 0x8CF2249: disconnect_and_free_it (plugin_transport_udp.c:1322)
==26165== by 0x567DBF5: GNUNET_CONTAINER_multipeermap_get_multiple (container_multipeermap.c:791)
==26165== by 0x8CF231C: udp_disconnect (plugin_transport_udp.c:1345)
==26165== by 0x40D9E7: free_neighbour (gnunet-service-transport_neighbours.c:929)
==26165== by 0x413E69: master_task (gnunet-service-transport_neighbours.c:2727)
==26165== by 0x569FC5E: run_ready (scheduler.c:595)
==26165== by 0x56A04EB: GNUNET_SCHEDULER_run (scheduler.c:817)
==26165== by 0x56AE56A: GNUNET_SERVICE_run (service.c:1490)
TagsNo tags attached.

Activities

Christian Grothoff

2013-12-13 17:57

manager   ~0007873

Fixed in SVN 31368.

Issue History

Date Modified Username Field Change
2013-12-13 17:54 Christian Grothoff New Issue
2013-12-13 17:54 Christian Grothoff Status new => assigned
2013-12-13 17:54 Christian Grothoff Assigned To => Matthias Wachs
2013-12-13 17:57 Christian Grothoff Note Added: 0007873
2013-12-13 17:57 Christian Grothoff Status assigned => resolved
2013-12-13 17:57 Christian Grothoff Fixed in Version => 0.10.0
2013-12-13 17:57 Christian Grothoff Resolution open => fixed
2013-12-13 17:57 Christian Grothoff Assigned To Matthias Wachs => Christian Grothoff
2013-12-24 20:53 Christian Grothoff Status resolved => closed
2024-05-03 13:58 Christian Grothoff Category UDP transport => transport service