| commit | 777024889c0043004962834f4d9353cfa6847dd6 | |
| author | Jim Meyering <meyering@redhat.com> | |
| Sat, 28 Aug 2010 15:45:29 +0000 (28 17:45 +0200) | ||
| committer | Jim Meyering <meyering@redhat.com> | |
| Sat, 28 Aug 2010 17:28:20 +0000 (28 19:28 +0200) | ||
| tree | ab597978663b93ef1134cdcaa57ab921dd1d21f0 | treesnapshot (tar.gz zip) |
| parent | c984948ff5db81b760a8a1d9d5d9512754fc30c2 | commitdiff |
tac: avoid double free
* src/tac.c (main): Reading a line longer than 16KiB would cause
tac to realloc its primary buffer. Then, just before exit, tac
would mistakenly free the original (now free'd) buffer.
This bug was introduced by commit be6c13e7, "maint: always free a
buffer, to avoid even semblance of a leak".
* NEWS (Bug fixes): Mention it.
* tests/misc/tac (double-free): New test, to exercise this.
Reported by Salvo Tomaselli in <http://bugs.debian.org/594666>.
* src/tac.c (main): Reading a line longer than 16KiB would cause
tac to realloc its primary buffer. Then, just before exit, tac
would mistakenly free the original (now free'd) buffer.
This bug was introduced by commit be6c13e7, "maint: always free a
buffer, to avoid even semblance of a leak".
* NEWS (Bug fixes): Mention it.
* tests/misc/tac (double-free): New test, to exercise this.
Reported by Salvo Tomaselli in <http://bugs.debian.org/594666>.
| NEWS | diffblobblamehistory | |
| src/tac.c | diffblobblamehistory | |
| tests/misc/tac | diffblobblamehistory |