From 6b1f14ca0177a25a72eaf1f62ed1ad00f6ae4f5f Mon Sep 17 00:00:00 2001 From: Arne Redlich Date: Mon, 17 Feb 2014 23:22:02 +0100 Subject: [PATCH] nfs_fchown_async: fix nullptr dereference nfs_chown_data is hooked up under nfs_cb_data->continue_data but no ->free_continue_data is configured, so once free_nfs_cb_data is invoked it will trip over a nullptr. Signed-off-by: Arne Redlich --- lib/libnfs.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/libnfs.c b/lib/libnfs.c index a6987d5..b2a5350 100644 --- a/lib/libnfs.c +++ b/lib/libnfs.c @@ -3444,6 +3444,7 @@ int nfs_fchown_async(struct nfs_context *nfs, struct nfsfh *nfsfh, int uid, int data->cb = cb; data->private_data = private_data; data->continue_data = chown_data; + data->free_continue_data = free; data->fh.data.data_len = nfsfh->fh.data.data_len; data->fh.data.data_val = malloc(data->fh.data.data_len); if (data->fh.data.data_val == NULL) { -- 2.34.1