From ed08c8fd9d8adf0caf3e725079adbd2870ad4f41 Mon Sep 17 00:00:00 2001 From: Steve Dickson Date: Tue, 19 Mar 2024 16:01:09 -0400 Subject: [PATCH] rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183) --- .libtirpc.metadata | 1 + ...rpc-1.3.3-null-ptrs-not-reused-fixed.patch | 23 +++++++++++++++++++ libtirpc.spec | 6 ++++- 3 files changed, 29 insertions(+), 1 deletion(-) create mode 100644 .libtirpc.metadata create mode 100644 libtirpc-1.3.3-null-ptrs-not-reused-fixed.patch diff --git a/.libtirpc.metadata b/.libtirpc.metadata new file mode 100644 index 0000000..b71cb4a --- /dev/null +++ b/.libtirpc.metadata @@ -0,0 +1 @@ +6e52c39148494e4836e2d5d4f28b11ddfa65394b libtirpc-1.3.3.tar.bz2 diff --git a/libtirpc-1.3.3-null-ptrs-not-reused-fixed.patch b/libtirpc-1.3.3-null-ptrs-not-reused-fixed.patch new file mode 100644 index 0000000..80b5a2c --- /dev/null +++ b/libtirpc-1.3.3-null-ptrs-not-reused-fixed.patch @@ -0,0 +1,23 @@ +commit 6951a9c3139c9c7dbb0bdae70737996011fc7a37 +Author: Herb Wartens +Date: Mon Mar 18 11:07:15 2024 -0400 + + rpcb_clnt.c: memory leak in destroy_addr + + Piece was dropped from original fix. + + Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2225226 + Signed-off-by: Steve Dickson + +diff --git a/src/rpcb_clnt.c b/src/rpcb_clnt.c +index 68fe69a..d909efc 100644 +--- a/src/rpcb_clnt.c ++++ b/src/rpcb_clnt.c +@@ -121,6 +121,7 @@ destroy_addr(addr) + free(addr->ac_taddr->buf); + addr->ac_taddr->buf = NULL; + } ++ free(addr->ac_taddr); + addr->ac_taddr = NULL; + } + free(addr); diff --git a/libtirpc.spec b/libtirpc.spec index bf521ab..01cd2f5 100644 --- a/libtirpc.spec +++ b/libtirpc.spec @@ -2,7 +2,7 @@ Name: libtirpc Version: 1.3.3 -Release: 7%{?dist} +Release: 8%{?dist} Summary: Transport Independent RPC Library License: SISSL and BSD URL: http://git.linux-nfs.org/?p=steved/libtirpc.git;a=summary @@ -30,6 +30,7 @@ Patch003: libtirpc-1.3.3-dos-sleep.patch Patch004: libtirpc-1.3.3-null-ptrs-not-reused.patch Patch005: libtirpc-1.3.3-gssd-context-creation.patch Patch006: libtirpc-1.3.3-double-free.patch +Patch007: libtirpc-1.3.3-null-ptrs-not-reused-fixed.patch %description This package contains SunLib's implementation of transport-independent @@ -130,6 +131,9 @@ mv %{buildroot}%{_mandir}/man3 %{buildroot}%{_mandir}/man3t %{_mandir}/*/* %changelog +* Tue Mar 19 2024 Steve Dickson - 1.3.3-8 +- rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11183) + * Wed Mar 13 2024 Steve Dickson - 1.3.3-7 - exception build (RHEL-11183)