mirror of
https://github.com/opnsense/src.git
synced 2026-02-13 07:44:48 -05:00
This bug could be reproduced easily by calling sem_open() with O_CREAT | O_EXCL on a semaphore that is already open in the process. The struct sem_nameinfo would be freed while still in sem_list and later calls to sem_open() or sem_close() could access freed memory. PR: 206396 MFC after: 5 days |
||
|---|---|---|
| .. | ||
| Makefile | ||
| semtest.c | ||