Aksal/nuttx
3
1
Fork 1
mirror of https://github.com/apache/nuttx.git synced 2026-08-12 07:55:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fs_epoll: [bug fix] epoll node use-after-free in epoll extend list

Browse source 
Signed-off-by: wangbowen6 <wangbowen6@xiaomi.com>
This commit is contained in:
wangbowen6 2022-11-25 23:33:22 +08:00 • committed by Xiang Xiao
parent 377bf97613
commit a0ded9d0d4
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
fs/vfs/fs_epoll.c
View file

@ -171,6 +171,7 @@ static int epoll_do_close(FAR struct file *filep)
{
FAR epoll_head_t *eph = filep->f_priv;
FAR epoll_node_t *epn;
FAR epoll_node_t *tmp;
int ret;
ret = nxmutex_lock(&eph->lock);
@ -189,7 +190,7 @@ static int epoll_do_close(FAR struct file *filep)
poll_fdsetup(epn->pfd.fd, &epn->pfd, false);
}
list_for_every_entry(&eph->extend, epn, epoll_node_t, node)
list_for_every_entry_safe(&eph->extend, epn, tmp, epoll_node_t, node)
{
kmm_free(epn);
}