From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gorcunov@gmail.com>
Received: from mail-lf1-f66.google.com (mail-lf1-f66.google.com
 [209.85.167.66])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by dev.tarantool.org (Postfix) with ESMTPS id 38BE546970E
 for <tarantool-patches@dev.tarantool.org>;
 Tue, 14 Jan 2020 20:30:14 +0300 (MSK)
Received: by mail-lf1-f66.google.com with SMTP id b15so10451825lfc.4
 for <tarantool-patches@dev.tarantool.org>;
 Tue, 14 Jan 2020 09:30:14 -0800 (PST)
Received: from uranus.localdomain ([5.18.171.94])
 by smtp.gmail.com with ESMTPSA id q10sm7912642ljj.60.2020.01.14.09.30.12
 for <tarantool-patches@dev.tarantool.org>
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Tue, 14 Jan 2020 09:30:12 -0800 (PST)
Date: Tue, 14 Jan 2020 20:30:11 +0300
From: Cyrill Gorcunov <gorcunov@gmail.com>
Message-ID: <20200114173011.GI31598@uranus>
References: <20191129213905.36097-1-maria.khaydich@tarantool.org>
 <1575631765.615916554@f415.i.mail.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1575631765.615916554@f415.i.mail.ru>
Subject: Re: [Tarantool-patches] [PATCH] Memtx_tuple_delete used heap after
 free
List-Id: Tarantool development patches <tarantool-patches.dev.tarantool.org>
List-Unsubscribe: <https://lists.tarantool.org/mailman/options/tarantool-patches>, 
 <mailto:tarantool-patches-request@dev.tarantool.org?subject=unsubscribe>
List-Archive: <https://lists.tarantool.org/pipermail/tarantool-patches/>
List-Post: <mailto:tarantool-patches@dev.tarantool.org>
List-Help: <mailto:tarantool-patches-request@dev.tarantool.org?subject=help>
List-Subscribe: <https://lists.tarantool.org/mailman/listinfo/tarantool-patches>, 
 <mailto:tarantool-patches-request@dev.tarantool.org?subject=subscribe>
To: tarantool-patches@dev.tarantool.org

On Fri, Dec 06, 2019 at 02:29:25PM +0300, Maria Khaydich wrote:
>    Overlooked a better solution as @PersDep kindly suggested. Sending the
>    fixed version. 
>     
>    Subject: [PATCH] Memtx_tuple_delete used heap after free
>    Struct of type tuple_format is being passed as
>    an argument to tuple_format_unref where it might
>    be freed. On such occasion any further references
>    to format fields should not take place.
>     
>    Closes #4658
>    ---
>    Issue:
>    https://github.com/tarantool/tarantool/issues/4658
>    Branch:
>    https://github.com/tarantool/tarantool/compare/eljashm/gh-4658-heap-use-after-free
Acked-by: Cyrill Gorcunov <gorcunov@gmail.com>