mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-24 02:59:43 -04:00
Compute qpzone_get_lock(elem->node) into a local variable while the heap lock is still held, rather than dereferencing the stale elem pointer after releasing the lock. A concurrent thread running setsigningtime() (e.g. via IXFR apply on a worker thread) could free the top-of-heap element between the heap lock release and the dereference, causing a use-after-free. |
||
|---|---|---|
| .. | ||
| dns | ||
| isc | ||
| isccc | ||
| isccfg | ||
| ns | ||
| .gitignore | ||
| meson.build | ||