[Tarantool-patches] [PATCH] Memtx_tuple_delete used heap after free

Nikita Pettik korablev at tarantool.org
Tue Jan 14 23:24:55 MSK 2020


On 14 Jan 20:30, Cyrill Gorcunov wrote:
> On Fri, Dec 06, 2019 at 02:29:25PM +0300, Maria Khaydich wrote:
> >    Overlooked a better solution as @PersDep kindly suggested. Sending the
> >    fixed version. 
> >     
> >    Subject: [PATCH] Memtx_tuple_delete used heap after free
> >    Struct of type tuple_format is being passed as
> >    an argument to tuple_format_unref where it might
> >    be freed. On such occasion any further references
> >    to format fields should not take place.
> >     
> >    Closes #4658
> >    ---
> >    Issue:
> >    https://github.com/tarantool/tarantool/issues/4658
> >    Branch:
> >    https://github.com/tarantool/tarantool/compare/eljashm/gh-4658-heap-use-after-free
> Acked-by: Cyrill Gorcunov <gorcunov at gmail.com>

Changed commit message to "Fix use-after-free in memtx_tuple_delete()"
and pushed to master. Thanks.



More information about the Tarantool-patches mailing list