From: Wolfgang Bumiller <w.bumiller@proxmox.com>
Date: Thu, 28 Jul 2016 09:52:18 +0000 (+0200)
Subject: conf: set pty_info to NULL after free
X-Git-Tag: lxc-1.0.9~42
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=791c686a941ccd52ab3f641cf1ca37c97ddc4ad3;p=thirdparty%2Flxc.git

conf: set pty_info to NULL after free

This fixes a double free corruption on container-requested
reboots when lxc_spawn() fails before receiving the ttys, as
lxc_fini() (part of __lxc_start()'s cleanup) calls
lxc_delete_tty().

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
---

diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index 4e36bcb14..076360109 100644
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -3840,6 +3840,7 @@ void lxc_delete_tty(struct lxc_tty_info *tty_info)
 	}
 
 	free(tty_info->pty_info);
+	tty_info->pty_info = NULL;
 	tty_info->nbtty = 0;
 }