Mirrors_Framework/nuttx
1
0
Fork 0
mirror of https://github.com/apache/nuttx.git synced 2026-05-18 08:54:05 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fs_epoll: [bug fix] epoll node use-after-free in epoll extend list

Browse Source 
Signed-off-by: wangbowen6 <wangbowen6@xiaomi.com>
This commit is contained in:
wangbowen6
2022-11-25 23:33:22 +08:00
committed by Xiang Xiao
parent 377bf97613
commit a0ded9d0d4
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fs/vfs/fs_epoll.c
+2 -1
View File
@@ -171,6 +171,7 @@ static int epoll_do_close(FAR struct file *filep)
{
FAR epoll_head_t *eph = filep->f_priv;
FAR epoll_node_t *epn;
FAR epoll_node_t *tmp;
int ret;
ret = nxmutex_lock(&eph->lock);
@@ -189,7 +190,7 @@ static int epoll_do_close(FAR struct file *filep)
poll_fdsetup(epn->pfd.fd, &epn->pfd, false);
}
list_for_every_entry(&eph->extend, epn, epoll_node_t, node)
list_for_every_entry_safe(&eph->extend, epn, tmp, epoll_node_t, node)
{
kmm_free(epn);
}