Skip to content

DAOS-19202 client: Fix cont_create use-after-frees (#18515)#18602

Merged
mchaarawi merged 1 commit into
release/2.8from
liw/daos_cont_create_with_label-uaf-2.8
Jul 8, 2026
Merged

DAOS-19202 client: Fix cont_create use-after-frees (#18515)#18602
mchaarawi merged 1 commit into
release/2.8from
liw/daos_cont_create_with_label-uaf-2.8

Conversation

@liw

@liw liw commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Calling daos_cont_create_with_label may result in use-after-frees when underlying tasks reinitialize:

cont_prop  ev        Use-after-free
----------------------------------------------------------------
NULL       non-NULL  merged_props in daos_cont_create
RF         non-NULL  merged_props in daos_cont_create_with_label

This patch refactors daos_cont_create_with_label and daos_cont_create to free properties they allocate in task completion callbacks.

Steps for the author:

  • Commit message follows the guidelines.
  • Appropriate Features or Test-tag pragmas were used.
  • Appropriate Functional Test Stages were run.
  • At least two positive code reviews including at least one code owner from each category referenced in the PR.
  • Testing is complete. If necessary, forced-landing label added and a reason added in a comment.

After all prior steps are complete:

  • Gatekeeper requested (daos-gatekeeper added as a reviewer).

Calling daos_cont_create_with_label may result in use-after-frees when
underlying tasks reinitialize:

  cont_prop  ev        Use-after-free
  ----------------------------------------------------------------
  NULL       non-NULL  merged_props in daos_cont_create
  RF         non-NULL  merged_props in daos_cont_create_with_label

This patch refactors daos_cont_create_with_label and daos_cont_create to
free properties they allocate in task completion callbacks.

Signed-off-by: Li Wei <liwei@hpe.com>
@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown

Ticket title is 'Use-after-free issues in daos_cont_create_with_label when events are used'
Status is 'In Progress'
Labels: 'request_for_2.8'
https://daosio.atlassian.net/browse/DAOS-19202

@liw liw added the clean-cherry-pick Cherry-pick from another branch that did not require additional edits label Jul 2, 2026
@liw liw marked this pull request as ready for review July 6, 2026 01:03
@liw liw requested review from a team as code owners July 6, 2026 01:03
@liw liw requested a review from mchaarawi July 6, 2026 01:04
@liw

liw commented Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

The NLT issues look irrelevant.

@liw

liw commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

@mchaarawi, ping...

@mchaarawi

Copy link
Copy Markdown
Contributor

@mchaarawi, ping...

@liw i did not see this. fwiw for clean cherry pick backports, a review is not required. only merge approval

@liw

liw commented Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, thanks. I thought one review was required.

@liw liw requested a review from a team July 8, 2026 13:01
@liw liw added the forced-landing The PR has known failures or has intentionally reduced testing, but should still be landed. label Jul 8, 2026
@mchaarawi

Copy link
Copy Markdown
Contributor

OK, thanks. I thought one review was required.

for non-clean cherry pick, yes

@mchaarawi mchaarawi merged commit d6fedc8 into release/2.8 Jul 8, 2026
40 of 42 checks passed
@mchaarawi mchaarawi deleted the liw/daos_cont_create_with_label-uaf-2.8 branch July 8, 2026 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

clean-cherry-pick Cherry-pick from another branch that did not require additional edits forced-landing The PR has known failures or has intentionally reduced testing, but should still be landed.

Development

Successfully merging this pull request may close these issues.

2 participants