Searched hist:206396 (Results 1 - 2 of 2) sorted by relevance

/freebsd-10-stable/tools/regression/posixsem2/
H A Dsemtest.cdiff 294963 Wed Jan 27 21:06:44 MST 2016 jilles MFC r294565: sem: Don't free nameinfo that is still in list when open()
fails.

This bug could be reproduced easily by calling sem_open() with O_CREAT |
O_EXCL on a semaphore that is already open in the process. The struct
sem_nameinfo would be freed while still in sem_list and later calls to
sem_open() or sem_close() could access freed memory.

PR: 206396
/freebsd-10-stable/lib/libc/gen/
H A Dsem_new.cdiff 294963 Wed Jan 27 21:06:44 MST 2016 jilles MFC r294565: sem: Don't free nameinfo that is still in list when open()
fails.

This bug could be reproduced easily by calling sem_open() with O_CREAT |
O_EXCL on a semaphore that is already open in the process. The struct
sem_nameinfo would be freed while still in sem_list and later calls to
sem_open() or sem_close() could access freed memory.

PR: 206396

Completed in 68 milliseconds