about summary refs log tree commit homepage
diff options
context:
space:
mode:
authorEric Wong <normalperson@yhbt.net>2013-10-12 21:44:08 +0000
committerEric Wong <normalperson@yhbt.net>2013-10-12 21:44:08 +0000
commitb7bda87ead4a53bb792dbbfb6079aad8cd4170de (patch)
treeaeb3f6d8b167a97e0023e2f28b656890b13fb96b
parente8217a1fe0cf341b7219a426f23e02cb44281301 (diff)
downloadcmogstored-b7bda87ead4a53bb792dbbfb6079aad8cd4170de.tar.gz
This release fixes a bug which only affects users of the
undocumented multi-process configuration feature
(which is also multi-threaded).

* avoid use-after-free with multi-process setups

  readdir on the same DIR pointer is undefined if DIR was inherited by
  multiple children.  Using the reentrant readdir_r would not have
  helped, since the underlying file descriptor and kernel file handle
  were still shared (and we need rewinddir, too).

  This readdir usage bug existed in cmogstored since the earliest
  releases, but was harmless until the cmogstored 1.3 series.

  This misuse of readdir lead to hitting a leftover call to free().
  So this bug only manifested since
  commit 1fab1e7a7f03f3bc0abb1b5181117f2d4605ce3b
  (svc: implement top-level by_mog_devid hash)

  Fortunately, these bugs only affect users of the undocumented
  multi-process feature (not just multi-threaded).
-rw-r--r--README2
1 files changed, 1 insertions, 1 deletions
diff --git a/README b/README
index 546199e..ad88e1b 100644
--- a/README
+++ b/README
@@ -56,7 +56,7 @@ Source tarballs suitable for distribution are housed here:
 * http://bogomips.org/cmogstored/files/
 
 The latest stable release is:
-        http://bogomips.org/cmogstored/files/cmogstored-1.3.0.tar.gz
+        http://bogomips.org/cmogstored/files/cmogstored-1.3.1.tar.gz
 
 See http://bogomips.org/cmogstored/NEWS for release notes