[Date Prev][Date Next] [Chronological] [Thread] [Top]

(ITS#8401) mdb_env_stat crashes if env is not open

Full_Name: Pietro Cerutti
Version: lmdb 0.9.18
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (

mdb_env_stat crashes is the env was created but not opened. This happens because
mdb_env_stat calls mdb_env_pick_meta, which doesn't check whether the two pages
are NULL before dereferencing them.

Please note that there is no mention of the fact that the env must have been
opened before calling mdb_env_stat in the documentation [1].

The proposed patch is to check whether the environment is active before getting
the most recent page:

--- mdb.c.orig  2016-04-13 10:00:30.084676000 +0000
+"B2B mdb.c       2016-04-13 10:07:32.064085000 +0000
@@ -9432,7 +9432,7 @@
        MDB_meta *meta;

-       if (env == NULL || arg == NULL)
+       if (env == NULL || !(env->me_flags & MDB_ENV_ACTIVE) || arg == NULL)
                return EINVAL;

        meta = mdb_env_pick_meta(env);

[1] http://symas.com/mdb/doc/group__mdb.html#gaf881dca452050efbd434cd16e4bae255