[jira] (GUACAMOLE-194) Double memory free bug / or thread-unsafeness in guacd, called in the guac_common_ssh_destroy_user function

[Robin (JIRA)]

Title: Message Title

Robin created an issue   Guacamole / GUACAMOLE-194 Double memory free bug / or thread-unsafeness in guacd, called in the guac_common_ssh_destroy_user function Issue Type: Bug Affects Versions: 0.9.10-incubating Assignee: Unassigned Attachments: guacd-stack trace.txt Components: guacd Created: 31/Jan/17 12:48 Environment: guacd docker container on ubuntu and debian Priority: Major Reporter: Robin We are heavy users of the RDP feature with SSH/SFTP for file downloads and uploads. We are seeing frequent guacd crashes, even the first session log off can cause a crash. After a few sessions (Sometimes hundreds, often thousands) the container becomes unstable, causes very high system load and no new connections via guacamole are possible. We typically also see the virtual docker Ethernet adapter enter the disabled state. https://github.com/apache/incubator-guacamole-server/blob/master/src/common-ssh/guac_ssh_user.c void guac_common_ssh_destroy_user(guac_common_ssh_user* user) { /* Free private key, if present */ if (user->private_key != NULL) guac_common_ssh_key_free(user->private_key); /* Free all other data */ free(user->password); free(user->username); free(user); } Add Comment   This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d)