bugGNU FreeIPMI - Bugs: bug #64187, Memory repeated freed

 
 

bug #64187: Memory repeated freed

Submitter:  None
Submitted:  Fri 12 May 2023 09:26:17 AM UTC
   
 
Category:  ipmi-sel Severity:  3 - Normal
Priority:  5 - Normal Item Group:  Crash
Status:  Fixed Privacy:  Public
Assigned to:  None Open/Closed:  Closed
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 12 May 2023 02:37:54 PM UTC, comment #3: 


> Also, do you feel this requires an immediate stable release?


Actually, its been awhile since I've done a release.  If you can confirm this fix works for you, I will do a release.

Albert Chu <chu11>
Group administrator
Fri 12 May 2023 01:50:17 PM UTC, comment #2: 

A fix has been pushed.

https://git.savannah.gnu.org/cgit/freeipmi.git/commit/?h=freeipmi-1-6-0-stable

Could you please try it out and let me know if it works for you.

Also, do you feel this requires an immediate stable release?

Albert Chu <chu11>
Group administrator
Fri 12 May 2023 01:26:48 PM UTC, comment #1: 

That is indeed an error, thanks.  Will be fixed shortly.

Albert Chu <chu11>
Group administrator
Fri 12 May 2023 09:26:17 AM UTC, original submission:  

first:
_ipmiseld_poll(void *arg) in ipmiseld.c called two functions:
one is ipmi_sdr_ctx_destroy()
another is ipmiseld_sdr_cache_create_and_load()

second:
ipmiseld_sdr_cache_and_load() in ipmiseld-cache.c. also called fuction ipmi_sdr_ctx_destroy()

Imagine a scenario:
_ipmiseld_poll called ipmiseld_sdr_cache_and_load() and ipmiseld_sdr_cache_and_load execution faild, then ipme_sdr_ctx_destroy() will be called first in ipmiseld_sdr_cache_and_load then _ipmiseld_poll will goto cleanup,ipme_sdr_ctx_destroy will be execute twice.

This hidden danger triggered service failed in some Linux System, and fixed up in openEuler : https://gitee.com/src-openeuler/freeipmi/pulls/20

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by chu11 (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2023-09-05 chu11 Open/ClosedOpen Closed
    2023-09-05 chu11 StatusNone Fixed

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code