A problem in ndmp_packets.c

Jeremy Allison jra at samba.org
Wed Dec 10 18:56:31 GMT 2003


On Wed, Dec 10, 2003 at 04:53:45PM +0900, kawasa_r at itg.hitachi.co.jp wrote:
> We found a bug in ndmp_packets.c. In some cases, memory for response record is freed doubly when it is released.
> So we post a fixed code.
> 
> [Problem]
> The memory for response record is freed doubly when it is released.
> 
> [Cause]
> In the loop of releasing response record, the pointer for next entry is stored to auto valuable.
> 
> [Measures]
> Check the pointer for next entry is already released or not.

Ok, I'm not sure I understand what you're trying to do here.
Can you explicitly explain when a double free might take place ?
I can't see how this can happen currently.

Jeremy.


More information about the samba-technical mailing list