[Tarantool-patches] [PATCH] Memtx_tuple_delete used heap after free
Nikita Pettik
korablev at tarantool.org
Tue Jan 14 23:24:55 MSK 2020
On 14 Jan 20:30, Cyrill Gorcunov wrote:
> On Fri, Dec 06, 2019 at 02:29:25PM +0300, Maria Khaydich wrote:
> > Overlooked a better solution as @PersDep kindly suggested. Sending the
> > fixed version.
> >
> > Subject: [PATCH] Memtx_tuple_delete used heap after free
> > Struct of type tuple_format is being passed as
> > an argument to tuple_format_unref where it might
> > be freed. On such occasion any further references
> > to format fields should not take place.
> >
> > Closes #4658
> > ---
> > Issue:
> > https://github.com/tarantool/tarantool/issues/4658
> > Branch:
> > https://github.com/tarantool/tarantool/compare/eljashm/gh-4658-heap-use-after-free
> Acked-by: Cyrill Gorcunov <gorcunov at gmail.com>
Changed commit message to "Fix use-after-free in memtx_tuple_delete()"
and pushed to master. Thanks.
More information about the Tarantool-patches
mailing list