libceph: fix a use after free issue in osdmap_set_max_osd
If the state variable is krealloced successfully, map->osd_state will be freed, once following two reallocation failed, and exit the function without resetting map->osd_state, map->osd_state become a wild pointer. fix it by resetting them after krealloc successfully. Signed-off-by:Li RongQing <roy.qing.li@gmail.com> Signed-off-by:
Ilya Dryomov <ilya.dryomov@inktank.com>
parent
dc220db0
Please register or sign in to comment