diff options
| author | Gabriel Jeanneau <gabriel.jeanneau@6wind.com> | 2022-01-17 15:18:27 +0100 |
|---|---|---|
| committer | Stéphane Gonauer <stephane.gonauer@6wind.com> | 2022-03-04 13:12:58 +0100 |
| commit | c66678018c1f111bb361c8f2069c67c725ec9e1c (patch) | |
| tree | 55f4f0b1dfe5530ebfdb632849664ee7dc3b58e9 /crypto | |
| parent | 57d5aa43123b8a8243e8e8e6971597afe352f9ed (diff) | |
| download | accel-ppp-c66678018c1f111bb361c8f2069c67c725ec9e1c.tar.gz accel-ppp-c66678018c1f111bb361c8f2069c67c725ec9e1c.zip | |
triton: fix use after free in timer.c
When using pppd_compat module, accel-ppp crash with SIGBUS on
spin_lock(&t->ctx->lock) of timer_thread.
When a moduile call triton_timer_del, fd are close without taking into
account epoll function and without removing from polled fd list.
File descriptor are removed from polled fd list and then close in
timer_thread avoiding use after free.
Fixes: 5bac5a2edb7b ("rewriting triton library...")
Signed-off-by: Gabriel Jeanneau <gabriel.jeanneau@6wind.com>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions