OpenSolaris

Printable Version Enter a New Search
Bug ID 6630437
Synopsis smb_smf_create_service_pgroup() can segfault on failure
State 10-Fix Delivered (Fix available in build)
Category:Subcategory utility:cifs
Keywords
Responsible Engineer Keyur Desai
Reported Against
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_84
Fixed In snv_84
Release Fixed solaris_nevada(snv_84)
Related Bugs 6617183
Submit Date 15-November-2007
Last Update Date 9-May-2008
Description 
In smb_smf_create_service_pgroup() we have the following code:

        /*
         * only create a handle if it doesn't exist. It is ok to exist
         * since the pg handle will be set as a side effect.
         */
        if (handle->scf_pg == NULL)
                handle->scf_pg = scf_pg_create(handle->scf_handle);

We never check that scf_pg_create() succeeded, and we end up dying
horribly later on when we try to use the NULL pointer.
Work Around 
N/A
Comments 
N/A