Opened 16 years ago

Closed 16 years ago

#7014 closed defect (fixed)

Possible use after free in lirc_client.c

Reported by: Erik Hovland <erik@…> Owned by: danielk
Priority: trivial Milestone: unknown
Component: MythTV - User Interface Library Version: head
Severity: low Keywords:
Cc: Ticket locked: no

Description

It is possible to use sha_bang after it has been freed, because it hasn't been zeroed out.

Attachments (1)

libs_libmythui-use-after-free​ (715 bytes ) - added by Erik Hovland <erik@…> 16 years ago.
zero both sha_bang and filename after free

Download all attachments as: .zip

Change History (3)

by Erik Hovland <erik@…>, 16 years ago

Attachment: libs_libmythui-use-after-free​ added

zero both sha_bang and filename after free

comment:1 by stuartm, 16 years ago

Owner: changed from stuartm to danielk
Status: new → assigned

comment:2 by danielk, 16 years ago

Resolution: → fixed
Status: assigned → closed

(In [22167]) Fixes #7014. clear pointers after free to avoid possible deref of free'd pointer in lirc code.

Note: See TracTickets for help on using tickets.