bin/94767: [patch] rcorder(8) dumps core when does not use a
proper RCng script (dansguardian)
Matthew Dillon
dillon at apollo.backplane.com
Wed Mar 29 00:06:23 UTC 2006
I commented out the free()'s in DragonFly. The reason is that the
free()s don't take into account the fact that there can be circular
dependancies on those structures. If a circular dependancy occurs,
you wind up with a use-after-free and then a double-free situation.
Commenting out the free() was the easiest solution.
-Matt
More information about the freebsd-current
mailing list