diff options
| author | Greg Hudson <ghudson@mit.edu> | 2016-06-23 12:01:56 -0400 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2016-07-06 16:24:18 -0400 |
| commit | ab1aeed87db2d9e5777f99c850aa9b0c6500a6cc (patch) | |
| tree | 71974f6585133a56a4a71306c6d4e47cbb33e140 | |
| parent | dcc8b9541947024386905d73a966f458e94ac3d5 (diff) | |
| download | krb5-ab1aeed87db2d9e5777f99c850aa9b0c6500a6cc.zip krb5-ab1aeed87db2d9e5777f99c850aa9b0c6500a6cc.tar.gz krb5-ab1aeed87db2d9e5777f99c850aa9b0c6500a6cc.tar.bz2 | |
Fix profile_flush_to_file() state corruption
In write_data_to_file(), do not clear the profile data object's flags.
If the call to this function resulted from profile_flush_to_file(), we
do not want to clear the DIRTY flag, and we especially do not want to
clear the SHARED flag for a data object which is part of
g_shared_trees. Instead, clear the DIRTY flag in
profile_flush_file_data().
Add a test case to prof_test1 to exercise the bug in unfixed code.
Also modify test1 to abandon the altered profile after flushing it to
a file, to preserve the external behavior of the script before this
fix.
(cherry picked from commit 32a05995ff9df0d5ef8aff0d020900a37747670d)
ticket: 8431
version_fixed: 1.14.3
| -rw-r--r-- | src/util/profile/prof_file.c | 2 | ||||
| -rw-r--r-- | src/util/profile/prof_test1 | 22 |
2 files changed, 22 insertions, 2 deletions
diff --git a/src/util/profile/prof_file.c b/src/util/profile/prof_file.c index d774593..907c119 100644 --- a/src/util/profile/prof_file.c +++ b/src/util/profile/prof_file.c @@ -473,7 +473,6 @@ static errcode_t write_data_to_file(prf_data_t data, const char *outfile, } } - data->flags = 0; retval = 0; errout: @@ -509,6 +508,7 @@ errcode_t profile_flush_file_data(prf_data_t data) } retval = write_data_to_file(data, data->filespec, 0); + data->flags &= ~PROFILE_FILE_DIRTY; k5_mutex_unlock(&data->lock); return retval; } diff --git a/src/util/profile/prof_test1 b/src/util/profile/prof_test1 index 87368d8..d158ab3 100644 --- a/src/util/profile/prof_test1 +++ b/src/util/profile/prof_test1 @@ -40,7 +40,7 @@ proc test1 {} { #profile_iterator_free $iter catch {file delete $wd/test3.ini} profile_flush_to_file $p $wd/test3.ini - profile_release $p + profile_abandon $p if $verbose { puts "Reloading new profile" } set p [profile_init_path $wd/test3.ini] @@ -315,6 +315,25 @@ proc test8 {} { puts "OK: test8: relation order in the presence of deletions" } +proc test9 {} { + global wd verbose + + # Regression test for #8431: profile_flush_to_file erroneously + # cleared the DIRTY and SHARED flags from the data object, which + # could lead to a dangling reference in g_shared_trees on release. + set p [profile_init_path $wd/test2.ini] + catch {file delete $wd/test3.ini} + profile_flush_to_file $p $wd/test3.ini + profile_release $p + + # If a dangling reference was created in g_shared_trees, the next + # profile open will trigger an assertion failure. + set p [profile_init_path $wd/test2.ini] + profile_release $p + + puts "OK: test9: profile_flush_to_file with no changes" +} + test1 test2 test3 @@ -323,5 +342,6 @@ test5 test6 test7 test8 +test9 exit 0 |