Konstantin Belousov
5ed954efd1
If alloc_unr() call in the pipe_create() failed, then pipe->pipe_ino is
...
-1. But, because ino_t is unsigned, this case was not covered by the
test ino > 0 in pipeclose(), leading to the free_unr(-1). Fix it by
explicitely comparing with 0 and -1. [1]
Do no access freed memory, the inode number was cached to prevent access
to cpipe after it possibly was freed, but I failed to commit the right
patch.
Noted by: gianni [1]
Pointy hat to: kib
MFC after: 3 days
2011-12-01 11:36:41 +00:00
..
2011-11-28 18:51:40 +00:00
2011-11-22 21:56:55 +00:00
2011-11-19 19:25:57 +00:00
2011-11-27 16:22:19 +00:00
2011-11-28 21:42:31 +00:00
2011-11-22 20:45:11 +00:00
2011-11-30 18:11:49 +00:00
2011-11-30 08:47:17 +00:00
2011-10-27 14:15:26 +00:00
2011-08-27 14:24:27 +00:00
2011-11-30 18:33:23 +00:00
2011-11-30 17:39:00 +00:00
2011-11-28 16:07:26 +00:00
2011-11-07 15:43:11 +00:00
2011-11-26 18:02:39 +00:00
2011-11-08 10:18:07 +00:00
2011-11-22 21:28:20 +00:00
2011-12-01 11:36:41 +00:00
2011-10-10 09:13:07 +00:00
2011-11-18 03:05:20 +00:00
2011-11-28 19:48:04 +00:00
2011-11-28 23:36:48 +00:00
2011-11-29 12:55:26 +00:00
2011-11-08 14:34:01 +00:00
2011-11-11 22:57:52 +00:00
2011-11-28 20:48:35 +00:00
2011-11-13 02:32:10 +00:00
2011-11-26 23:57:03 +00:00
2011-11-07 15:43:11 +00:00
2011-10-16 08:44:03 +00:00
2011-11-18 03:05:20 +00:00
2011-11-07 06:44:47 +00:00
2011-11-30 17:39:00 +00:00
2011-09-03 00:28:53 +00:00
2011-11-07 15:43:11 +00:00
2011-11-07 15:43:11 +00:00
2011-08-16 20:07:47 +00:00
2011-11-27 16:22:19 +00:00
2011-11-23 23:29:18 +00:00
2011-11-22 21:28:20 +00:00
2011-11-03 14:38:03 +00:00
2011-11-07 15:43:11 +00:00
2011-11-27 15:49:46 +00:00
2011-12-01 07:19:13 +00:00
2011-10-13 14:20:27 +00:00
2011-11-09 13:26:59 +00:00
2011-11-09 07:48:48 +00:00
2011-11-30 17:39:00 +00:00
2011-11-22 21:28:20 +00:00
2011-11-30 18:52:30 +00:00