Re: Brainy: UAF in iscsi_ioctl.c

[David Holland <dholland-tech%netbsd.org@localhost>]

On Sat, Sep 19, 2015 at 04:18:38PM +0200, Maxime Villard wrote:
 > Hi,
 > in sys/dev/iscsi/iscsi_ioctl.c:
 > 
 > 1542		free(sess, M_DEVBUF);
 > 1543
 > 1544		DEB(1, ("Cleanup: session ended %d\n", sess->id));
 > 
 > I guess inverting the two instructions fixes the bug.
 > 
 > Found by Brainy.

Fixed, but you can commit ones like this yourself you know :-)

-- 
David A. Holland
dholland%netbsd.org@localhost