Ticket #15 (new defect)

Opened 5 months ago

Last modified 5 months ago

In lasso_data_service_build_modify_response_msg we free a shared xmlNode

Reported by: bdauvergne Assigned to: fpeters
Priority: major Milestone:
Component: lasso-idwsf Version:
Severity: crash Keywords:
Cc:

Description

Valgrind log: 

==23557== Invalid read of size 4
==23557==    at 0x4D552B5: xmlFreeNode (in /usr/lib/libxml2.so.2.6.31)
==23557==    by 0x4AC7456: lasso_node_dispose (xml.c:1322)
==23557==    by 0x4B7183B: g_object_unref (in /usr/lib/libgobject-2.0.so.0.1600.3)
==23557==    by 0x4AC6772: lasso_node_impl_destroy (xml.c:963)
==23557==    by 0x4AC4B5D: lasso_node_destroy (xml.c:266)
==23557==    by 0x4AC7416: lasso_node_dispose (xml.c:1310)
==23557==    by 0x4B7183B: g_object_unref (in /usr/lib/libgobject-2.0.so.0.1600.3)
==23557==    by 0x4A26959: PyGObjectPtr_dealloc (_lasso.c:382)
==23557==    by 0x8086ABE: (within /usr/bin/python2.5)
==23557==    by 0x809C21D: (within /usr/bin/python2.5)
==23557==    by 0x81121B9: (within /usr/bin/python2.5)
==23557==    by 0x80C95E4: PyEval_EvalFrameEx (in /usr/bin/python2.5)
==23557==    by 0x80CB0D6: PyEval_EvalCodeEx (in /usr/bin/python2.5)
==23557==    by 0x81133BA: (within /usr/bin/python2.5)
==23557==    by 0x805CB36: PyObject_Call (in /usr/bin/python2.5)
==23557==    by 0x80C7CE3: PyEval_EvalFrameEx (in /usr/bin/python2.5)
==23557==    by 0x80CB0D6: PyEval_EvalCodeEx (in /usr/bin/python2.5)
==23557==    by 0x811342F: (within /usr/bin/python2.5)
==23557==    by 0x805CB36: PyObject_Call (in /usr/bin/python2.5)
==23557==    by 0x8062B9A: (within /usr/bin/python2.5)
==23557==  Address 0x58337bc is 4 bytes inside a block of size 60 free'd
==23557==    at 0x402265C: free (vg_replace_malloc.c:323)
==23557==    by 0x4D54E9A: xmlFreeNodeList (in /usr/lib/libxml2.so.2.6.31)
==23557==    by 0x4D54E06: xmlFreeNodeList (in /usr/lib/libxml2.so.2.6.31)
==23557==    by 0x4D54C4B: xmlFreeDoc (in /usr/lib/libxml2.so.2.6.31)
==23557==    by 0x4B04D35: lasso_data_service_build_modify_response_msg (data_service.c:789)
==23557==    by 0x4A47C64: data_service_build_modify_response_msg (_lasso.c:13932)
==23557==    by 0x80C9992: PyEval_EvalFrameEx (in /usr/bin/python2.5)
==23557==    by 0x80C95C4: PyEval_EvalFrameEx (in /usr/bin/python2.5)
==23557==    by 0x80C95C4: PyEval_EvalFrameEx (in /usr/bin/python2.5)
==23557==    by 0x80CB0D6: PyEval_EvalCodeEx (in /usr/bin/python2.5)
==23557==    by 0x81133BA: (within /usr/bin/python2.5)
==23557==    by 0x805CB36: PyObject_Call (in /usr/bin/python2.5)
==23557==    by 0x80C7CE3: PyEval_EvalFrameEx (in /usr/bin/python2.5)
==23557==    by 0x80CB0D6: PyEval_EvalCodeEx (in /usr/bin/python2.5)
==23557==    by 0x811342F: (within /usr/bin/python2.5)
==23557==    by 0x805CB36: PyObject_Call (in /usr/bin/python2.5)
==23557==    by 0x8062B9A: (within /usr/bin/python2.5)
==23557==    by 0x805CB36: PyObject_Call (in /usr/bin/python2.5)
==23557==    by 0x809D5EB: (within /usr/bin/python2.5)
==23557==    by 0x805CB36: PyObject_Call (in /usr/bin/python2.5)

Attachments

Change History

20.06.2008 00:24:11 changed by bdauvergne

  • owner changed from bdauvergne to fpeters.
  • component changed from bindings to lasso.

20.06.2008 00:26:03 changed by bdauvergne

  • component changed from lasso to lasso-idwsf.

20.06.2008 01:36:56 changed by bdauvergne

Fixed in lasso-dgme branch.

Add/Change #15 (In lasso_data_service_build_modify_response_msg we free a shared xmlNode)




Change Properties
Action