Details
-
Bug
-
Status: Resolved
-
Minor
-
Resolution: Fixed
-
3.7.2, 3.8.4, 3.9.2
Description
void *do_completion(void *v) { zhandle_t *zh = v; // ... api_epilog(zh, 0); // L1 LOG_DEBUG(LOGCALLBACK(zh), "completion thread terminated"); // L2 return 0; }
When the log level is debug, L2 gets the log calback after zookeeper_close(), causes uaf.
Attachments
Issue Links
- links to