[master] deb830f Plug a harmless heap use-after-free

Federico G. Schwindt fgsch at lodoss.net
Wed Apr 26 14:47:05 CEST 2017


commit deb830fbe6faf314a02908694a1e3d16070dc0fa
Author: Federico G. Schwindt <fgsch at lodoss.net>
Date:   Tue Apr 25 07:20:39 2017 -0700

    Plug a harmless heap use-after-free

diff --git a/bin/varnishd/common/heritage.h b/bin/varnishd/common/heritage.h
index b7bca53..5d6a8af 100644
--- a/bin/varnishd/common/heritage.h
+++ b/bin/varnishd/common/heritage.h
@@ -48,7 +48,6 @@ struct listen_sock {
 	VTAILQ_ENTRY(listen_sock)	list;
 	VTAILQ_ENTRY(listen_sock)	arglist;
 	int				sock;
-	const struct listen_arg		*arg;
 	char				*name;
 	struct suckaddr			*addr;
 	const struct transport		*transport;
diff --git a/bin/varnishd/mgt/mgt_acceptor.c b/bin/varnishd/mgt/mgt_acceptor.c
index 3b0985f..f9926f4 100644
--- a/bin/varnishd/mgt/mgt_acceptor.c
+++ b/bin/varnishd/mgt/mgt_acceptor.c
@@ -114,11 +114,10 @@ mac_callback(void *priv, const struct suckaddr *sa)
 	VTAILQ_FOREACH(ls, &heritage.socks, list) {
 		if (!VSA_Compare(sa, ls->addr))
 			ARGV_ERR("-a arguments %s and %s have same address\n",
-			    ls->arg->name, la->name);
+			    ls->name, la->name);
 	}
 	ALLOC_OBJ(ls, LISTEN_SOCK_MAGIC);
 	AN(ls);
-	ls->arg = la;
 	ls->sock = -1;
 	ls->addr = VSA_Clone(sa);
 	AN(ls->addr);



More information about the varnish-commit mailing list