Opened 5 years ago

Closed 5 years ago

#15905 closed defect (fixed)

GMatchInfo used after free in http.c

Reported by: olegoandreev Owned by: tomkiewicz
Milestone: 3.0.0 Component: libpurple
Version: Keywords:
Cc:

Description

GMatchInfo* is freed in line 308 in libpurple/http.c (https://hg.pidgin.im/pidgin/main/file/68de575c5e0c/libpurple/http.c#l308), however, the pointer is used later in g_match_info_fetch.

Change History (2)

comment:1 Changed 5 years ago by datallah

  • Milestone set to 3.0.0
  • Owner set to tomkiewicz

comment:2 Changed 5 years ago by Tomasz Wasilczyk <twasilczyk@…>

  • Resolution set to fixed
  • Status changed from new to closed

(In [aa0328600eb6]):
HTTP: fix use-after-free. Fixes #15905

Note: See TracTickets for help on using tickets.
All information, including names and email addresses, entered onto this website or sent to mailing lists affiliated with this website will be public. Do not post confidential information, especially passwords!