[Tarantool-patches] [PATCH 1/1] access: fix use-after-free of struct credentials

Kirill Yukhin kyukhin at tarantool.org
Thu Oct 31 10:35:35 MSK 2019


Hello,

On 31 окт 00:57, Vladislav Shpilevoy wrote:
> Func_delete() called credentials_destroy() after
> func->vtab->destroy(). But appeared, that vtab->destroy() is
> actually delete, and it frees the func object. Now the func's
> owner credentials are destroyed before the function is freed.
> 
> Closes #4597
> Follow up #2763
> ---
> Branch: https://github.com/tarantool/tarantool/tree/gerold103/gh-4597-credentials-follow-up
> Issue: https://github.com/tarantool/tarantool/issues/4597

I've checked your patch into 1.10, 2.1, 2.2 and master.

--
Regards, Kirill Yukhin


More information about the Tarantool-patches mailing list