[RFC PATCH 13/23] vinyl: fix potential use-after-free in vy_read_view_merge

Vladimir Davydov vdavydov.dev at gmail.com
Tue Jul 17 13:16:51 MSK 2018


On Sun, Jul 08, 2018 at 07:48:44PM +0300, Vladimir Davydov wrote:
> If is_first_insert flag is set and vy_stmt_type(rv->tuple) equals
> IPROTO_DELETE, we free rv->tuple, but then we dereference it via
> an on-stack variable to check if we need to turn a REPLACE into an
> INSERT or vice versa. Fix this.
> ---
>  src/box/vy_write_iterator.c | 18 +++++++++---------
>  1 file changed, 9 insertions(+), 9 deletions(-)

This one is trivial. I pushed it to 1.10.



More information about the Tarantool-patches mailing list