[RFC PATCH 13/23] vinyl: fix potential use-after-free in vy_read_view_merge
Vladimir Davydov
vdavydov.dev at gmail.com
Tue Jul 17 13:16:51 MSK 2018
On Sun, Jul 08, 2018 at 07:48:44PM +0300, Vladimir Davydov wrote:
> If is_first_insert flag is set and vy_stmt_type(rv->tuple) equals
> IPROTO_DELETE, we free rv->tuple, but then we dereference it via
> an on-stack variable to check if we need to turn a REPLACE into an
> INSERT or vice versa. Fix this.
> ---
> src/box/vy_write_iterator.c | 18 +++++++++---------
> 1 file changed, 9 insertions(+), 9 deletions(-)
This one is trivial. I pushed it to 1.10.
More information about the Tarantool-patches
mailing list