Crash while performing redisClusterAsyncFree()

[rahulKrishnaM]

Crash while performing redisClusterAsyncFree()

[rahulKrishnaM]

I don't see that address being explicitly set to 0 after memory is freed. Do you agree with the analysis?

[rahulKrishnaM]

Posting some more thoughts,
selectNode() is trying to do a dictNext(). So, if we don't set the he object to NULL once we free it inside _dictClear(), any later dictNext() access might still think the entry as valid and try to process that (i.e when the execution is still inside _dictClear()).

[rahulKrishnaM]

maybe something in lines of:

    while (he) {
        nextHe = he->next;
   +    ht->tabl[i] = nextHe;
        dictFreeEntryKey(ht, he);
        dictFreeEntryVal(ht, he);
        hi_free(he);
        ht->used--;
        he = nextHe;
    }