Hello community, here is the log from the commit of package reiserfs for openSUSE:Factory checked in at 2013-11-07 08:44:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/reiserfs (Old) and /work/SRC/openSUSE:Factory/.reiserfs.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "reiserfs" Changes: -------- --- /work/SRC/openSUSE:Factory/reiserfs/reiserfs.changes 2013-09-27 18:04:41.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.reiserfs.new/reiserfs.changes 2013-11-07 08:44:16.000000000 +0100 @@ -1,0 +2,6 @@ +Wed Nov 6 18:51:04 UTC 2013 - [email protected] + +- debugreiserfs-fix-use-after-free-while-closing-log: + debugreiserfs: fix use after free while closing log (bnc#849264). + +------------------------------------------------------------------- New: ---- debugreiserfs-fix-use-after-free-while-closing-log ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ reiserfs.spec ++++++ --- /var/tmp/diff_new_pack.tYtB4e/_old 2013-11-07 08:44:18.000000000 +0100 +++ /var/tmp/diff_new_pack.tYtB4e/_new 2013-11-07 08:44:18.000000000 +0100 @@ -35,6 +35,7 @@ Source: reiserfsprogs-%{tar_version}.tar.bz2 BuildRoot: %{_tmppath}/%{name}-%{version}-build Patch1: silent-rules.patch +Patch2: debugreiserfs-fix-use-after-free-while-closing-log %description This package includes utilities for making the file system @@ -62,6 +63,7 @@ %prep %setup -q -n reiserfsprogs-%{tar_version} %patch1 -p1 +%patch2 -p1 %build autoreconf -fiv ++++++ debugreiserfs-fix-use-after-free-while-closing-log ++++++ >From fe448aeac49e5eb7d388bbc8dc5c559b24a3d1b4 Mon Sep 17 00:00:00 2001 From: Jeff Mahoney <[email protected]> Date: Wed, 6 Nov 2013 13:48:49 -0500 Subject: debugreiserfs: fix use after free while closing log Git-repo: gitolite.kernel.org:/pub/scm/linux/kernel/git/jeffm/reiserfsprogs.git Git-commit: fe448aeac49e5eb7d388bbc8dc5c559b24a3d1b4 References: bnc#849264 reiserfs_close(fs) frees fs and we were using it after freeing to close the log. Signed-off-by: Jeff Mahoney <[email protected]> --- debugreiserfs/debugreiserfs.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/debugreiserfs/debugreiserfs.c b/debugreiserfs/debugreiserfs.c index edd89db..89bfece 100644 --- a/debugreiserfs/debugreiserfs.c +++ b/debugreiserfs/debugreiserfs.c @@ -686,6 +686,7 @@ int main(int argc, char *argv[]) char *file_name; int error; struct debugreiserfs_data *data; + FILE *log; data = getmem(sizeof(struct debugreiserfs_data)); file_name = parse_options(data, argc, argv); @@ -777,9 +778,9 @@ int main(int argc, char *argv[]) break; } + log = data(fs)->log; reiserfs_close(fs); - if (data(fs)->log) { - fclose(data(fs)->log); - } + if (log) + fclose(log); return 0; } -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
