{"comment":{"url":"https://api.github.com/repos/branch-predictor/ceph/comments/15154430","html_url":"https://github.com/branch-predictor/ceph/commit/4efa2145cbc2adddcd00f29aeeeecb12c74ea487#commitcomment-15154430","id":15154430,"user":{"login":"liewegas","id":433031,"avatar_url":"https://avatars.githubusercontent.com/u/433031?v=3","gravatar_id":"","url":"https://api.github.com/users/liewegas","html_url":"https://github.com/liewegas","followers_url":"https://api.github.com/users/liewegas/followers","following_url":"https://api.github.com/users/liewegas/following{/other_user}","gists_url":"https://api.github.com/users/liewegas/gists{/gist_id}","starred_url":"https://api.github.com/users/liewegas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liewegas/subscriptions","organizations_url":"https://api.github.com/users/liewegas/orgs","repos_url":"https://api.github.com/users/liewegas/repos","events_url":"https://api.github.com/users/liewegas/events{/privacy}","received_events_url":"https://api.github.com/users/liewegas/received_events","type":"User","site_admin":false},"position":7,"line":304,"path":"src/kv/LevelDBStore.h","commit_id":"4efa2145cbc2adddcd00f29aeeeecb12c74ea487","created_at":"2015-12-24T14:32:46Z","updated_at":"2015-12-24T14:32:46Z","body":"Pretty sure this will trigger a use-after-free.  The buffer in the dbiter result will go away after the iterator is incremented, but the bufferptr may live forever as it get added to a bufferlist, refcounted, etc."}}