https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-7078 Lustre <p>In <tt>ll_update_lmd_md()</tt> if <tt>md_merge_attr()</tt> fails then the <tt>lmv_stripe_md</tt> is pointed to by both <tt>lli-&gt;lli_lsm_md</tt> and <tt>md-&gt;lmv</tt>. After the failure the stripe md is freed by <tt>md_free_lustre_md()</tt> and so <tt>lli-&gt;lli_lsm_md</tt> becomes a dangling pointer.</p> LU-7078

use after free from ll_update_lsm_md()

Bug Minor Resolved Fixed Di Wang John Hammond Tue, 1 Sep 2015 13:50:23 +0000 Sat, 19 Sep 2015 05:31:26 +0000 Sat, 19 Sep 2015 05:31:26 +0000 Lustre 2.8.0 Lustre 2.8.0 0 3 <p>wangdi (di.wang@intel.com) uploaded a new patch: <a href="http://review.whamcloud.com/16382" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/16382</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-7078" title="use after free from ll_update_lsm_md()" class="issue-link" data-issue-key="LU-7078"><del>LU-7078</del></a> llite: reset md-&gt;lmv to NULL<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 67a659447eda3ca3f9ced42a4a656c2e1210bd85</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/16382/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/16382/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-7078" title="use after free from ll_update_lsm_md()" class="issue-link" data-issue-key="LU-7078"><del>LU-7078</del></a> llite: reset md-&gt;lmv to NULL<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: ab074f434b198c86872954402b94857d7cec38c4</p> <p>Landed for 2.8</p> Related Development Rank 1|hzxlzr: Rank (Obsolete) 9223372036854775807 Severity