View Issue Details

IDProjectCategoryView StatusLast Update
0003161GNUnettransport servicepublic2024-05-03 11:58
ReporterChristian Grothoff Assigned ToChristian Grothoff Due Date
PrioritynormalSeveritycrashReproducibilityhave not tried
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.10.0Fixed in Version0.10.0 
Summary0003161: use after free in DV
Description==22902== Invalid read of size 8
==22902== at 0x10C3E2: cull_routes (gnunet-service-dv.c:1163)
==22902== by 0x5685705: GNUNET_CONTAINER_multipeermap_iterate (container_multipeermap.c:361)
==22902== by 0x10C535: handle_direct_disconnect (gnunet-service-dv.c:1185)
==22902== by 0x10C82A: handle_ats_update (gnunet-service-dv.c:1292)
==22902== by 0x4E3C292: process_pi_message (ats_api_performance.c:382)
==22902== by 0x4E3CFE1: process_ats_message (ats_api_performance.c:554)
==22902== by 0x566D619: receive_task (client.c:589)
==22902== by 0x56ABF10: run_ready (scheduler.c:593)
==22902== by 0x56AC862: GNUNET_SCHEDULER_run (scheduler.c:808)
==22902== by 0x56BB65F: GNUNET_SERVICE_run (service.c:1478)
==22902== by 0x10F13C: main (gnunet-service-dv.c:2083)
==22902== Address 0x6ee2800 is 0 bytes inside a block of size 48 free'd
==22902== at 0x4C2A74C: free (vg_replace_malloc.c:468)
==22902== by 0x5670558: GNUNET_xfree_ (common_allocation.c:236)
==22902== by 0x10B639: handle_direct_connect (gnunet-service-dv.c:876)
==22902== by 0x10C878: handle_ats_update (gnunet-service-dv.c:1301)
==22902== by 0x4E3C292: process_pi_message (ats_api_performance.c:382)
==22902== by 0x4E3CFE1: process_ats_message (ats_api_performance.c:554)
==22902== by 0x566D619: receive_task (client.c:589)
==22902== by 0x56ABF10: run_ready (scheduler.c:593)
==22902== by 0x56AC862: GNUNET_SCHEDULER_run (scheduler.c:808)
==22902== by 0x56BB65F: GNUNET_SERVICE_run (service.c:1478)
==22902== by 0x10F13C: main (gnunet-service-dv.c:2083)
==22902==
Steps To Reproducemake check with valgrind
TagsNo tags attached.

Activities

Christian Grothoff

2013-12-07 22:13

manager   ~0007773

Should be fixed in 31166.

Issue History

Date ModifiedUsernameFieldChange
2013-12-07 22:10Christian GrothoffNew Issue
2013-12-07 22:13Christian GrothoffNote Added: 0007773
2013-12-07 22:13Christian GrothoffStatusnew => resolved
2013-12-07 22:13Christian GrothoffFixed in Version => 0.10.0
2013-12-07 22:13Christian GrothoffResolutionopen => fixed
2013-12-07 22:13Christian GrothoffAssigned To => Christian Grothoff
2013-12-24 19:54Christian GrothoffStatusresolved => closed
2024-05-03 11:58Christian GrothoffCategoryDV service or transport => transport service