[systemd-bugs] [Bug 62605] New: sd_journal_close accesses j->files after free.

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=62605

          Priority: medium
            Bug ID: 62605
          Assignee: systemd-bugs at lists.freedesktop.org
           Summary: sd_journal_close accesses j->files after free.
        QA Contact: systemd-bugs at lists.freedesktop.org
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: marius.vollmer at redhat.com
          Hardware: Other
            Status: NEW
           Version: unspecified
         Component: general
           Product: systemd

The function sd_journal_close first frees j->files and then indirectly calls
detach_location which access j->files.

When allocating hashmaps from the pool, this likely goes undetected by valgrind
and likely doesn't cause any crashes either.  This does crash when the hashmap
is allocated with malloc, though.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-bugs/attachments/20130321/f857aedc/attachment.html>