| commit | 7dbcb14e75740fd7793473d5b8b1db5ab0639c43 | |
| author | Volker Lendecke <vl@samba.org> | |
| Thu, 14 Nov 2013 20:30:49 +0000 (14 21:30 +0100) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Fri, 22 Nov 2013 10:28:21 +0000 (22 11:28 +0100) | ||
| tree | 6675e4c420ea91ba349c74ea0da5dec39cc37046 | treesnapshot (tar.gz zip) |
| parent | 59da16e6751fc67a4e24b71851d0e49cb708bd77 | commitdiff |
smbd: Fix a talloc hierarchy problem in msg_channel
When tearing down a watch_send with an open tevent_immediate, we
talloc_free the msg_channel while the tevent_immediate still references
it. Don't make the tevent_immediate outlive the msg_channel.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10250
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Nov 20 00:13:51 CET 2013 on sn-devel-104
(cherry picked from commit 2d91577f984bc83c2c87141cfdda87d068060b32)
When tearing down a watch_send with an open tevent_immediate, we
talloc_free the msg_channel while the tevent_immediate still references
it. Don't make the tevent_immediate outlive the msg_channel.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10250
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Nov 20 00:13:51 CET 2013 on sn-devel-104
(cherry picked from commit 2d91577f984bc83c2c87141cfdda87d068060b32)
| source3/lib/msg_channel.c | diffblobblamehistory |