Page MenuHomeFreeBSD

socket: Fix a use-after-free in soclose()
ClosedPublic

Authored by markj on Sep 15 2021, 7:58 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Jan 2, 2:45 PM
Unknown Object (File)
Tue, Dec 30, 5:48 AM
Unknown Object (File)
Sat, Dec 27, 9:41 PM
Unknown Object (File)
Mon, Dec 15, 11:59 PM
Unknown Object (File)
Thu, Dec 11, 5:12 PM
Unknown Object (File)
Nov 29 2025, 6:29 AM
Unknown Object (File)
Nov 25 2025, 2:20 AM
Unknown Object (File)
Nov 18 2025, 4:02 PM
Subscribers

Details

Summary

After releasing a reference to a socket "so", we should avoid testing
SOLISTENING(so) since the socket may have been freed. Instead, directly
test whether the list of unaccepted sockets is empty.

Fixes: f4bb1869ddd2 ("Consistently use the SOLISTENING() macro")
Pointy hat: markj
MFC after: 3 days

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 41533
Build 38422: arc lint + arc unit