Page MenuHomeFreeBSD

socket: Fix a use-after-free in soclose()
ClosedPublic

Authored by markj on Sep 15 2021, 7:58 PM.
Tags
None
Referenced Files
F165432111: D31973.id.diff
Sat, Aug 8, 4:29 AM
F165415253: D31973.id95318.diff
Sat, Aug 8, 2:56 AM
Unknown Object (File)
Fri, Aug 7, 3:05 PM
Unknown Object (File)
Wed, Jul 22, 3:08 PM
Unknown Object (File)
Sun, Jul 12, 12:15 AM
Unknown Object (File)
Jul 4 2026, 4:24 AM
Unknown Object (File)
Jul 4 2026, 4:22 AM
Unknown Object (File)
Jul 3 2026, 8:23 PM
Subscribers

Details

Summary

After releasing a reference to a socket "so", we should avoid testing
SOLISTENING(so) since the socket may have been freed. Instead, directly
test whether the list of unaccepted sockets is empty.

Fixes: f4bb1869ddd2 ("Consistently use the SOLISTENING() macro")
Pointy hat: markj
MFC after: 3 days

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable