RT RT/krbdev.mit.edu: Ticket #5686 NIM: BUG: LIB: khcint_remove_space() frees memory too soon resulting in potential invalid memory access Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

 The Basics  
Id
5686
Status
resolved
Worked
0 min
Priority
0/0
Queue
krb5
 

 Keyword Selections  
Component
  • windows
Version_reported
Version_Fixed
  • 1.6.3
Target_Version
  • 1.6.3
Tags
  • pullup
 

 Relationships  
Depends on:
Depended on by:
Parents:
  • 5691: (jaltman) Post KFW 3.2.1 Tracking Ticket [resolved]
Children:

Refers to:
Referred to by:
 
 Dates  
Created: Fri Aug 24 10:47:35 2007
Starts: Not set
Started: Fri Aug 24 10:47:38 2007
Last Contact: Fri Sep 28 19:39:02 2007
Due: Not set
Updated: Wed Oct 3 15:22:18 2007 by jaltman
 

 People  
Owner
 jaltman
Requestors
 jaltman@mit.edu
Cc
 
AdminCc
 
 

 More about Jeffrey Altman  
Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:
 

History   Display mode: [Brief headers] [Full headers]
      Fri Aug 24 10:47:35 2007  jaltman - Ticket created    
     
From: jaltman@mit.edu
Subject: SVN Commit

The Network Identity Manager Configuration Provider module keeps track
of the application and plug-in configuration settings organized into
configuration spaces.  The state of each configuration space is
maintained in a reference counted object.  Once all the references are
released, the Configuration Provider will attempt to free the
resources allocated for the object.

If the configuration space was marked for deletion, then the registry
keys associated with the object need to be deleted when the
object is being discarded.  Due to a coding error, the memory
allocated for the object would be freed before the associated registry
keys were deleted.  This could result in a memory access error.

The patch corrects the code in khcint_remove_space() to free the
allocated memory after all the remaining clean-up steps have been
performed.


Commit By: jaltman



Revision: 19865
Changed Files:
U   trunk/src/windows/identity/kconfig/api.c


Download (untitled) 944b
      Fri Aug 24 10:47:37 2007  jaltman - Requestor jaltman@mit.edu added    
      Fri Aug 24 10:47:38 2007  jaltman - Status changed from new to resolved    
      Fri Aug 24 10:47:38 2007  jaltman - Component windows added    
      Fri Sep 28 17:20:48 2007  jaltman - Target_Version 1.6.4 added    
      Fri Sep 28 17:20:48 2007  jaltman - Tags pullup added    
      Fri Sep 28 18:19:58 2007  tlyu - Target_Version 1.6.4 changed to 1.6.3    
      Fri Sep 28 19:38:59 2007  tlyu - Version_Fixed 1.6.3 added    
      Fri Sep 28 19:38:59 2007  tlyu - Correspondence added    
     
From: tlyu@mit.edu
Subject: SVN Commit

pull up r19865 from trunk

 r19865@cathode-dark-space:  jaltman | 2007-08-24 10:47:30 -0400
 ticket: new
 subject: NIM: khcint_remove_space() frees memory too soon
 component: windows

 The Network Identity Manager Configuration Provider module keeps track
 of the application and plug-in configuration settings organized into
 configuration spaces.  The state of each configuration space is
 maintained in a reference counted object.  Once all the references are
 released, the Configuration Provider will attempt to free the
 resources allocated for the object.

 If the configuration space was marked for deletion, then the registry
 keys associated with the object need to be deleted when the
 object is being discarded.  Due to a coding error, the memory
 allocated for the object would be freed before the associated registry
 keys were deleted.  This could result in a memory access error.

 The patch corrects the code in khcint_remove_space() to free the
 allocated memory after all the remaining clean-up steps have been
 performed.




Commit By: tlyu



Revision: 20000
Changed Files:
_U  branches/krb5-1-6/
U   branches/krb5-1-6/src/windows/identity/kconfig/api.c


Download (untitled) 1.1k
      Wed Oct  3 15:22:02 2007  jaltman - Subject changed from NIM: khcint_remove_space() frees memory too soon to NIM: BUG: LIB: khcint_remove_space() frees memory too soon resulting in potention invalid memory access    
      Wed Oct  3 15:22:18 2007  jaltman - Subject changed from NIM: BUG: LIB: khcint_remove_space() frees memory too soon resulting in potention invalid memory access to NIM: BUG: LIB: khcint_remove_space() frees memory too soon resulting in potential invalid memory access