|
Description
|
If a module creates an nvlist using fmd_nvl_alloc() for the purposes
of passing it to fmd via the transport module interface, it can cause
segfaults and memory corruption. The reason is that the nvlist ops
are per-module, but the lifetime of the event may exceed that of the
module. An attempt to free the nvlist after the module has been
closed will result in undefined behavior (dereferencing freed memory).
|