[ovs-build] Passed: ovsrobot/ovs#2422 (series_166961 - 639c63e)
builds at travis-ci.org
Thu Mar 26 21:55:01 UTC 2020
Build Update for ovsrobot/ovs
Duration: 56 mins and 48 secs
Commit: 639c63e (series_166961)
Author: Yifeng Sun
Message: tun_metadata: Fix coredump caused by use-after-free bug
Tun_metadata can be referened by flow and frozen_state at the same
time. When ovs-vswitchd handles TLV table mod message, the involved
tun_metadata gets freed. The call trace to free tun_metadata is
shown as below:
Unfortunately, this tun_metadata can be still used by some frozen_state,
and later on when frozen_state tries to access its tun_metadata table,
ovs-vswitchd crashes. The call trace to access tun_metadata from
frozen_state is shown as below:
This patch fixes it by introducing a reference count to tun_metadata.
Whenever a pointer of tun_metadata is passed between flow and
frozen_state, we increase its reference count. Reference count
is decreased at deallocation.
In present code, pointer of tun_metadata can be passed between flows.
It is safe because of RCU mechanism.
Signed-off-by: Yifeng Sun <pkusunyifeng at gmail.com>
Signed-off-by: 0-day Robot <robot at bytheb.org>
View the changeset: https://github.com/ovsrobot/ovs/compare/3c6d05a02e0f^...639c63ec92d0
View the full build log and details: https://travis-ci.org/github/ovsrobot/ovs/builds/667442078?utm_medium=notification&utm_source=email
You can unsubscribe from build emails from the ovsrobot/ovs repository going to https://travis-ci.org/account/preferences/unsubscribe?repository=22285853&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the build