DAOS-16812 cart: read after free cid 2556737 (#15517) (#15600)

- If failed to reply, skip rpc early buffer release Signed-off-by: Alexander A Oganezov <[email protected]>
daos-stack · Dec 13, 2024 · bdea4aa · bdea4aa
1 parent ebccb75
commit bdea4aa
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/cart/crt_hg.c b/src/cart/crt_hg.c
@@ -1479,7 +1479,7 @@ crt_hg_reply_send(struct crt_rpc_priv *rpc_priv)
 			  DP_HG_RC(hg_ret));
 		/* should success as addref above */
 		RPC_DECREF(rpc_priv);
-		rc = crt_hgret_2_der(hg_ret);
+		D_GOTO(out, rc = crt_hgret_2_der(hg_ret));
 	}
 
 	/* Release input buffer */
@@ -1492,6 +1492,7 @@ crt_hg_reply_send(struct crt_rpc_priv *rpc_priv)
 		}
 	}
 
+out:
 	return rc;
 }