- **status**: review --> fixed
---
** [tickets:#612] IMM: imm client crashes when using saImmOmSearchNext_2**
**Status:** fixed
**Created:** Thu Oct 31, 2013 09:51 AM UTC by Zoran Milinkovic
**Last Updated:** Fri Nov 01, 2013 09:53 AM UTC
**Owner:** Zoran Milinkovic
saImmOmSearchNext_2 code does not handle out_evt->info.imma.type well, and can
crash IMM client trying to free a random memory.
saImmOmsearchNext_2 assumes that out_evt->info.imma.type is always a type of
IMMA_EVT_ND2A_SEARCHNEXT_RSP, and according to the type,
IMMSV_OM_RSP_SEARCH_NEXT struct is freed.
If out_evt->info.imma.type is a type of IMMA_EVT_ND2A_IMM_ERROR, an IMM client
crashes.
The bug is seen in OpenSAF 4.2, and OpenSAF 4.3
---
Sent from sourceforge.net because opensaf-tickets@lists.sourceforge.net is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.
------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
Opensaf-tickets mailing list
Opensaf-tickets@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
