NLnetLabs/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

- Fix to defend against double event deletion, that could cause

Browse Source 
event corruption and use after free, for comm_timer_disable.
This commit is contained in:
W.C.A. Wijngaards
2026-08-21 10:29:58 +02:00
parent 8ee0bca833
commit 7fb79b0677
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/Changelog
+4
View File
@@ -1,3 +1,7 @@
21 August 2026: Wouter
- Fix to defend against double event deletion, that could cause
event corruption and use after free, for comm_timer_disable.
11 August 2026: Wouter
- Fix #1492 from zacek: Data race in log_init() on
key_created/log_lock when calling ub_ctx_create()
util/netevent.c
+6 -2
View File
@@ -7036,8 +7036,12 @@ comm_timer_disable(struct comm_timer* timer)
{
if(!timer)
return;
ub_timer_del(timer->ev_timer->ev);
timer->ev_timer->enabled = 0;
/* The event backend can not always deal with event del if it was not
* added before. For that, there is a check if it was added here.*/
if(timer->ev_timer->enabled) {
ub_timer_del(timer->ev_timer->ev);
timer->ev_timer->enabled = 0;
}
}
void