http://defect.opensolaris.org/bz/show_bug.cgi?id=12027


amaguire <alan.maguire at sun.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ACCEPTED                    |CAUSEKNOWN


--- Comment #2 from amaguire <alan.maguire at sun.com> 2009-10-16 12:31:49 UTC 
---
(In reply to comment #0)
> res->sr_handle points at memory filled with murdered cows.  I can't see how we
> call release_scf_resources() twice though?
> 

I think I understand what happens here - if we look at create_scf_resources(),
it will call release_scf_resources() itself if creation of any of the scf
entities fails during its operation. So there's a few places where we "goto
failure" if create_scf_resources() fails when instead we should just return -1,
since the scf resources have already been freed for us. If creation of scf
resources fails, we double-free in those places at present.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Reply via email to