[PATCH] Version 2: Patchset for bug #10344 - SessionLogoff on a signed connection with an outstanding notify request crashes smbd.

Andreas Schneider asn at samba.org
Wed Mar 12 03:53:20 MDT 2014


On Tuesday 11 March 2014 14:34:42 you wrote:
> On Tue, Mar 11, 2014 at 01:59:08PM -0700, Jeremy Allison wrote:
> > Sorry - this is a really long reply. But it covers
> > a lot of ground (and I think I've found a bug in
> > metze.diff also - more on that below).
> > 
> > Metze if you want to jump to the bug in the logic
> > in your patch just search for :
> > 
> > ******METZE***BUG***ALERT***********
> > 
> > below :-).
> 
> OK, I'm wrong. Sorry. I went through
> lib/tevent/tevent_queue.c again really
> carefully (yet again... :-) and I had
> missed the case that when struct tevent_queue_entry *e
> is removed in the tevent_queue_entry_destructor() the
> trigger called is that of the
> new head of the list, q->list,
> *not* the next pointer of the
> deleted event e->next.
> 
> So it *IS* going to wait for all of
> them to be done without an implicit
> ordering.
> 
> Sorry for the noise :-). Does
> make my point about how opaque
> the internals of lib/tevent/tevent_queue.c
> are though !

If such details are not in the documentation of tevent, please add it!!!
 
> Cheers,
> 
> 	Jeremy.

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org



More information about the samba-technical mailing list