Re: [PATCH] staging: lustre: mgc: fix potential use after free in error path

2017-08-14 Thread James Simmons
On Mon, 7 Aug 2017, Cihangir Akturk wrote: > The config_log_add() function first calls config_log_put() with the > variable 'cld' and then jumps to label 'out_cld', which will call > the same function with the same 'cld' variable. However, at this > point, 'cld' might have been already freed by

[PATCH] staging: lustre: mgc: fix potential use after free in error path

2017-08-07 Thread Cihangir Akturk
The config_log_add() function first calls config_log_put() with the variable 'cld' and then jumps to label 'out_cld', which will call the same function with the same 'cld' variable. However, at this point, 'cld' might have been already freed by the first invocation of config_log_put(). Even if we