From 64bb9509864c35b02a79948eb8234de17e43a948 Mon Sep 17 00:00:00 2001 From: Alexander K Date: Wed, 17 Aug 2022 13:50:34 +0300 Subject: [PATCH] Fix KASAN use-after-free in tfw_connection_drop(): conn_drop hook may free the conn and we should not dereference the pointer even for the assertion. --- fw/connection.c | 1 - 1 file changed, 1 deletion(-) diff --git a/fw/connection.c b/fw/connection.c index 0e457d1645..88741cc4a0 100644 --- a/fw/connection.c +++ b/fw/connection.c @@ -86,7 +86,6 @@ tfw_connection_drop(TfwConn *conn) { /* Ask higher levels to free resources at connection close. */ TFW_CONN_HOOK_CALL(conn, conn_drop); - BUG_ON(conn->stream.msg); } /*