[THRIFT-4485] Possible invalid ptr AV with overlapped read/write on pipes

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 0.12.0
• Component/s: Delphi - Library
• Patch Info: Patch Available
• Assignee: Jens Geyer
• Reporter: Jens Geyer
• Created: 01/Feb/18 22:29
• Updated: 27/Dec/18 15:25
• Resolved: 02/Feb/18 16:52

Description

If a read or write operation on pipes reaches the set timeout, the read/write operation is not properly cancelled. However, the overlapped struct gets freed when leaving the method, which essentially leaves the pending read or write operation with an undefined pointer.

Easily reproducible with buffered transport over pipes, a combination that does not work at all anyways. The workaround for both problems is to not use buffered transport with pipes (use framed instead), and some sane tinemouts (not too short).

Issue Links

• links to: GitHub Pull Request #1489