[Bug 197246] [patch] use-after-free bug in pipe_dtor()

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197246

--- Comment #2 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kib
Date: Tue Feb  3 10:29:41 UTC 2015
New revision: 278145
URL: https://svnweb.freebsd.org/changeset/base/278145

Log:
  Fix use after free in pipe_dtor().  PIPE_NAMED flag must be tested
  before pipeclose() is called, since for !PIPE_NAMED case, when peer is
  already closed, the pipe pair memory is freed.

  Submitted by:    luke.tw at gmail.com
  PR:    197246
  Tested by:    pho
  MFC after:    3 days

Changes:
  head/sys/kern/sys_pipe.c

-- 
You are receiving this mail because:
You are the assignee for the bug.