SSSD / sssd

#2532 Memory hierarchy issue in failover code
Closed: Invalid Opened by jhrozek.

Closed: Invalid
Reopen Issue

When writing unit tests for ticket #1884 I stumbled upon a memory hierarchy issue that's been in the failover code for some time.

Servers that share the same hostname also point to a single instance of a 'server_common' structure. This 'server_common' structure is allocated on top of the server context.

When the collapse_srv_lookup function is called, it frees all servers, which may trigger freeing the common structure. But a later callback fo_resolve_service_done iterates over a list of pending requests allocated on the common structure, which results in a use-after-free bug.

This bug is a blocker for #1884. Please file into the same milestone.

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12.4

Fields changed

owner: somebody => jhrozek
status: new => assigned

I'm sorry, this was actually a bug in my tests..

resolution: => invalid
status: assigned => closed

Metadata Update from @jhrozek:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.12.4

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3574

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Low
defect
SSSD
1.12.2
0
0
0
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.