d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

MFC r299894

Browse Source 
pdu_delete(request) frees request, so move the call after
login_new_response(request) to avoid a use-after-free error

Reported by:	Coverity
CID:		1331219, 1331220
This commit is contained in:
truckman 2016-05-23 04:50:01 +00:00
parent 4cff368a1f
commit 651189b30d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
usr.sbin/ctld/login.c
View File

@ -754,10 +754,10 @@ login_wait_transition(struct connection *conn)
login_send_error(request, 0x02, 0x00);
log_errx(1, "got no \"T\" flag after answering AuthMethod");
}
pdu_delete(request);
log_debugx("got state transition request");
response = login_new_response(request);
pdu_delete(request);
login_set_nsg(response, BHSLR_STAGE_OPERATIONAL_NEGOTIATION);
pdu_send(response);
pdu_delete(response);