Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-7078

use after free from ll_update_lsm_md()

Details

    • Bug
    • Resolution: Fixed
    • Minor
    • Lustre 2.8.0
    • Lustre 2.8.0
    • None
    • 3
    • 9223372036854775807

    Description

      In ll_update_lmd_md() if md_merge_attr() fails then the lmv_stripe_md is pointed to by both lli->lli_lsm_md and md->lmv. After the failure the stripe md is freed by md_free_lustre_md() and so lli->lli_lsm_md becomes a dangling pointer.

      Attachments

        Activity

          People

            di.wang Di Wang
            jhammond John Hammond
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: