Skip to content

Conversation

mfdii
Copy link
Contributor

@mfdii mfdii commented Mar 9, 2019

The check to see if we found the loginuid closes the file pointer and doesn't return. If we can't find the loginuid this could lead to fclose being called twice which was causing falco to segfault with the error free(): double free detected in tcache 2 on COS.

I believe we want to function to return SCAP_FAILURE if we can't find the loginuid.

Tested on COS and this stopped the segfault.

@mfdii
Copy link
Contributor Author

mfdii commented Mar 9, 2019

fixes falcosecurity/falco#508

Copy link
Contributor

@mstemm mstemm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks so much for finding the fix!

@mstemm mstemm merged commit f75566f into dev Mar 11, 2019
@mstemm mstemm deleted the mfdii/fix_double_free branch March 11, 2019 17:18
@ye
Copy link

ye commented Mar 12, 2019

@mstemm or @mfdii any idea when will falcosecurity/falco get a new release trickle in with this change set?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants