This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: gai_cancel()


On Fri, 2017-06-16 at 17:52 +0200, Florian Weimer wrote:
> On 06/16/2017 05:46 PM, Phil Blundell wrote:
> > Opinions?
> 
> Is this related to bug 20874?
> 
>   https://sourceware.org/bugzilla/show_bug.cgi?id=20874
> 

No, I don't think it's related.  I poked at that bug a bit and I am
fairly sure that the problem there is specifically in gai_suspend(). 
Under conditions that I don't entirely understand yet, we seem to be
somehow returning from gai_suspend while its waitlist[] entry is still
linked into requestlist->waiting.  Since gai_suspend() allocated its
waitlist[] on the stack, this leads rapidly to disaster when gai_notify
subsequently tries to traverse the linked list.

p.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]