| commit | 3c83eaadb6b8c121fbb604ca45b1d5dd0bc3f51e | |
| author | Volker Lendecke <vl@samba.org> | |
| Thu, 14 Nov 2013 20:30:49 +0000 (14 21:30 +0100) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Fri, 22 Nov 2013 10:27:55 +0000 (22 11:27 +0100) | ||
| tree | cc56d73fa3e6169dddb3bfc66d308427cc295747 | treesnapshot (tar.gz zip) |
| parent | c61910b51c4ee0107b0da0b41f162851e9f5638a | commitdiff |
smbd: Fix a talloc hierarchy problem in msg_channel
When tearing down a watch_send with an open tevent_immediate, we
talloc_free the msg_channel while the tevent_immediate still references
it. Don't make the tevent_immediate outlive the msg_channel.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10250
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Nov 20 00:13:51 CET 2013 on sn-devel-104
(cherry picked from commit 2d91577f984bc83c2c87141cfdda87d068060b32)
When tearing down a watch_send with an open tevent_immediate, we
talloc_free the msg_channel while the tevent_immediate still references
it. Don't make the tevent_immediate outlive the msg_channel.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10250
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Nov 20 00:13:51 CET 2013 on sn-devel-104
(cherry picked from commit 2d91577f984bc83c2c87141cfdda87d068060b32)
| source3/lib/msg_channel.c | diffblobblamehistory |