[RTEMS Project] #2888: Object identification by name may access freed memory in case of unlimited objects

RTEMS trac trac at rtems.org
Fri Jan 27 06:55:14 UTC 2017


#2888: Object identification by name may access freed memory in case of unlimited
objects
-----------------------------+---------------------------
 Reporter:  sebastian.huber  |      Owner:  Needs Funding
     Type:  defect           |     Status:  new
 Priority:  normal           |  Milestone:  Indefinite
Component:  cpukit           |    Version:
 Severity:  normal           |   Keywords:
-----------------------------+---------------------------
 The object identification by name routines, e.g. rtems_task_ident() call
 _Objects_Name_to_id_u32() without any protection.

 In case of unlimited objects, this may lead to a read of freed memory.

--
Ticket URL: <http://devel.rtems.org/ticket/2888>
RTEMS Project <http://www.rtems.org/>
RTEMS Project


More information about the bugs mailing list