[ovs-dev] [PATCH] ovn-controller: fix use-after-free in physical_run()

Ben Pfaff blp at ovn.org
Wed Jul 12 05:06:07 UTC 2017


On Sat, Jul 08, 2017 at 05:31:15PM -0400, Lance Richardson wrote:
> The hmap "tunnels" is persistent across IDL loop iterations, but
> stores pointers to strings in the local db replica which can be
> freed as database updates are processed. Fix by storing a copy
> of the string in the hmap instead of a pointer to the string in
> the replica.
> 
> Found via valgrind.
> 
> Fixes: 40128e371ec3 ("physical: Refactor port binding processing.")
> Signed-off-by: Lance Richardson <lrichard at redhat.com>

Thanks a lot!  I applied this to master, branch-2.7, and branch-2.6.


More information about the dev mailing list