[GNUnet-SVN] r27589 - gnunet/src/mesh

[gnunet]

Author: bartpolot
Date: 2013-06-25 15:21:54 +0200 (Tue, 25 Jun 2013)
New Revision: 27589

Modified:
   gnunet/src/mesh/gnunet-service-mesh-new.c
Log:
- fixed use after free on shutdown

Modified: gnunet/src/mesh/gnunet-service-mesh-new.c
===================================================================
--- gnunet/src/mesh/gnunet-service-mesh-new.c   2013-06-25 13:13:46 UTC (rev 
27588)
+++ gnunet/src/mesh/gnunet-service-mesh-new.c   2013-06-25 13:21:54 UTC (rev 
27589)
@@ -1320,7 +1320,7 @@
     p = nextp;
   }
   for (i = 0; i < pi->ntunnels; i++)
-      tunnel_destroy_empty (pi->tunnels[i]);
+    tunnel_destroy_empty (pi->tunnels[i]);
   GNUNET_array_grow (pi->tunnels, pi->ntunnels, 0);
   GNUNET_free (pi);
   return GNUNET_OK;
@@ -1495,9 +1495,25 @@
 }
 
 
+/**
+ * Add a tunnel to the list of tunnels a peer participates in.
+ * Update the tunnel's destination.
+ * 
+ * @param p Peer to add to.
+ * @param t Tunnel to add.
+ */
+static void
+peer_info_add_tunnel (struct MeshPeerInfo *p, struct MeshTunnel *t)
+{
+  t->dest = p->id;
+  GNUNET_PEER_change_rc (t->dest, 1);
+  GNUNET_array_append (p->tunnels, p->ntunnels, t);
+}
 
+
 /**
  * Remove a tunnel from the list of tunnels a peer participates in.
+ * Free the tunnel's destination.
  * 
  * @param p Peer to clean.
  * @param t Tunnel to remove.
@@ -1507,6 +1523,11 @@
 {
   unsigned int i;
 
+  if (t->dest == p->id)
+  {
+      GNUNET_PEER_change_rc (t->dest, -1);
+      t->dest = 0;
+  }
   for (i = 0; i < p->ntunnels; i++)
   {
     if (p->tunnels[i] == t)
@@ -2352,11 +2373,7 @@
     GNUNET_PEER_change_rc (t->next_hop, -1);
   }
   if (0 != t->dest) {
-      struct MeshPeerInfo *pi;
-
-      pi = peer_get_short (t->dest);
-      peer_info_remove_tunnel (pi, t);
-      GNUNET_PEER_change_rc (t->dest, -1);
+      peer_info_remove_tunnel (peer_get_short (t->dest), t);
   }
 
   if (GNUNET_SCHEDULER_NO_TASK != t->maintenance_task)
@@ -3152,8 +3169,8 @@
   path_add_to_peers (path, GNUNET_NO);
   tunnel_use_path (t, path);
 
-  t->dest = path->peers[size - 1];
-  GNUNET_PEER_change_rc (t->dest, 1);
+  peer_info_add_tunnel (dest_peer_info, t);
+
   if (own_pos == size - 1)
   {
     struct MeshClient *c;
@@ -4127,7 +4144,7 @@
               GNUNET_i2s (&my_full_id), t->id.tid, t->port, t->local_tid);
 
   peer_info = peer_get (&t_msg->peer);
-  GNUNET_array_append (peer_info->tunnels, peer_info->ntunnels, t);
+  peer_info_add_tunnel (peer_info, t);
   peer_connect (peer_info, t);
   GNUNET_SERVER_receive_done (client, GNUNET_OK);
   return;
@@ -4191,7 +4208,7 @@
   }
   else if (c == t->owner)
   {
-    peer_info_remove_tunnel (peer_get_short(t->dest), t);
+    peer_info_remove_tunnel (peer_get_short (t->dest), t);
     t->owner = NULL;
   }