| commit | 6c3f73bc536082fec38bd36e6c8a121033c68835 | |
| author | Herbert Xu <herbert@gondor.apana.org.au> | |
| Thu, 2 Oct 2014 00:26:06 +0000 (2 08:26 +0800) | ||
| committer | Herbert Xu <herbert@gondor.apana.org.au> | |
| Thu, 2 Oct 2014 00:26:06 +0000 (2 08:26 +0800) | ||
| tree | 8b1676ccf4edfd5b5b191fc9b248fbebfad131f8 | treesnapshot (tar.gz zip) |
| parent | 6df87cf1d4b7c0c490ab1803b863de10579df92e | commitdiff |
[EVAL] Fix use-after-free in dotrap/evalstring
The function dotrap calls evalstring using the stored trap string.
If evalstring then unsets that exact trap string then we will end
up using freed memory.
This patch fixes it by making evalstring always duplicate the string
before using it.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
The function dotrap calls evalstring using the stored trap string.
If evalstring then unsets that exact trap string then we will end
up using freed memory.
This patch fixes it by making evalstring always duplicate the string
before using it.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
| ChangeLog | diffblobblamehistory | |
| src/eval.c | diffblobblamehistory | |
| src/histedit.c | diffblobblamehistory |