Bug 229339 - amtapetype exits with free(): invalid pointer
amtapetype exits with free(): invalid pointer
Status: CLOSED RAWHIDE
Product: Fedora
Classification: Fedora
Component: amanda (Show other bugs)
6
All Linux
medium Severity medium
: ---
: ---
Assigned To: Lukas Vrabel
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2007-02-20 08:55 EST by Burn Alting
Modified: 2007-11-30 17:11 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2007-04-04 05:26:45 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Burn Alting 2007-02-20 08:55:03 EST
Description of problem:
amtapetype, on exit, attempts to free memory it shouldn't

Version-Release number of selected component (if applicable):
amanda-2.5.0p2

How reproducible:
Always

Steps to Reproduce:
1.amtapetype -o -f /dev/st0 -e 74G -b 128 -t CX450-TP
2.
3.
  
Actual results:


Expected results:


Additional info:
Fix is to mod tape-src/tapetype.c and in main(), near the end, rather than calls
to free(randombytes), call free(prandombytes) - randombytes can be different to
the allocated memory due to page alignment - prandombytes is the address of what
was allocated. If you upgrade to a later version of amanda (eg amanda-2.5.1p3)
amtapetype doesn't have this problem as it doesn't free memory before exiting.
Comment 1 Lukas Vrabel 2007-04-04 05:26:45 EDT
Actualy the latest version in devel is amanda-2.5.1p3, where amtatype doesn't 
have this problem (as you wrote), so im closing this as CLOSED:RAWHIDE. FC6 is 
maintained for critical bugs and security issues only.

Note You need to log in before you can comment on or make changes to this bug.