Fix: illegal memory access in session_create

[lttng-tools.git] / src / bin / lttng-relayd / session.c

diff --git a/src/bin/lttng-relayd/session.c b/src/bin/lttng-relayd/session.c
index f47b24f8fda696c4f50c2a02dd80209d581f5a44..8a786aaa6bb02cabe68c600971f702ee8fdef196 100644 (file)
--- a/src/bin/lttng-relayd/session.c
+++ b/src/bin/lttng-relayd/session.c
@@ -46,11 +46,16 @@ struct relay_session *session_create(const char *session_name,
                PERROR("relay session zmalloc");
                goto error;
        }
-
+       if (lttng_strncpy(session->session_name, session_name,
+                       sizeof(session->session_name))) {
+               goto error;
+       }
+       if (lttng_strncpy(session->hostname, hostname,
+                       sizeof(session->hostname))) {
+               goto error;
+       }
        session->ctf_traces_ht = lttng_ht_new(0, LTTNG_HT_TYPE_STRING);
        if (!session->ctf_traces_ht) {
-               free(session);
-               session = NULL;
                goto error;
        }
 
@@ -67,17 +72,15 @@ struct relay_session *session_create(const char *session_name,
        pthread_mutex_init(&session->reflock, NULL);
        pthread_mutex_init(&session->recv_list_lock, NULL);
 
-       strncpy(session->session_name, session_name,
-                       sizeof(session->session_name));
-       strncpy(session->hostname, hostname,
-                       sizeof(session->hostname));
        session->live_timer = live_timer;
        session->snapshot = snapshot;
 
        lttng_ht_add_unique_u64(sessions_ht, &session->session_n);
+       return session;
 
 error:
-       return session;
+       free(session);
+       return NULL;
 }
 
 /* Should be called with RCU read-side lock held. */
@@ -211,7 +214,8 @@ unlock:
        }
        cds_list_for_each_entry_rcu(stream, &session->recv_list,
                        recv_node) {
-               stream_close(stream);
+               /* Close streams which have not been published yet. */
+               try_stream_close(stream);
        }
 rcu_unlock:
        rcu_read_unlock();