View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002374 | GNUnet | transport service | public | 2012-05-24 11:26 | 2012-06-02 17:15 |
| Reporter | Matthias Wachs | Assigned To | Matthias Wachs | Due Date | |
| Priority | high | Severity | crash | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Product Version | Git master | ||||
| Target Version | 0.9.3 | Fixed in Version | 0.9.3 | ||
| Summary | 0002374: gnunet-service-transport_neighbours.c frees neighbour and then uses data | ||||
| Description | In GST_neighbours_handle_connect: case S_DISCONNECT: /* get rid of remains, ready to re-try */ 1) free_neighbour (n); 2) n = setup_neighbour (peer); n->state = S_CONNECT_RECV_ATS; GNUNET_ATS_reset_backoff (GST_ats, peer); GNUNET_ATS_suggest_address (GST_ats, peer); check_blacklist (peer, ts, address, session, ats, ats_count); | ||||
| Additional Information | 1) frees the neighbour and disconnects all sessions -> plugin terminates all sessions, cleans up peer data (peer id!) 2) uses information freed in 1) (e.g. peer) to setup a new peer -> invalid memory acccess! | ||||
| Tags | No tags attached. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2012-05-24 11:26 | Matthias Wachs | New Issue | |
| 2012-05-24 11:26 | Matthias Wachs | Status | new => assigned |
| 2012-05-24 11:26 | Matthias Wachs | Assigned To | => Matthias Wachs |
| 2012-05-24 11:44 | Matthias Wachs | Note Added: 0005939 | |
| 2012-05-24 11:45 | Matthias Wachs | Status | assigned => resolved |
| 2012-05-24 11:45 | Matthias Wachs | Resolution | open => fixed |
| 2012-05-27 16:33 | Christian Grothoff | Fixed in Version | => 0.9.3 |
| 2012-05-27 16:33 | Christian Grothoff | Target Version | => 0.9.3 |
| 2012-06-02 17:15 | Christian Grothoff | Status | resolved => closed |