summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEugene Yudin <e.yudin@ndmsystems.com>2019-02-22 19:47:53 +0300
committerWaldemar Brodkorb <wbrodkorb@conet.de>2019-03-02 10:49:39 +0100
commit5efc10d24e1fb7f59817f007c18219dfc46bf457 (patch)
tree27c7f8eb70538d9d5357aa854a77d4a70066063f
parentac48ce2b5c4f62ffc7d4986c1c7df17beaa18d64 (diff)
Fix NULL pointer dereference in open_memstream()
--000000000000cb1b1305827e5ae0 Content-Type: text/plain; charset="UTF-8" Hi, Current version of uClibc-ng has issue in open_memstream() function. If the cookie variable is NULL (due malloc() fail) then null pointer is dereferenced after if block. The attached patch fixes this issue. -- Best regards, Eugene <div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,<div><br></div><div>Current version of uClibc-ng has issue in open_memstream() function.</div><div>If the cookie variable is NULL (due malloc() fail) then null pointer is dereferenced after if block.</div><div><br></div><div>The attached patch fixes this issue.<br clear="all"><div>-- <br></div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div><span><div>Best regards,<br></div>Eugene</span></div></div></div></div></div></div></div></div></div>
-rw-r--r--libc/stdio/open_memstream.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/libc/stdio/open_memstream.c b/libc/stdio/open_memstream.c
index 17ef191cb..71a84138d 100644
--- a/libc/stdio/open_memstream.c
+++ b/libc/stdio/open_memstream.c
@@ -156,9 +156,10 @@ FILE *open_memstream(char **bufloc, size_t *sizeloc)
__STDIO_STREAM_VALIDATE(fp);
return fp;
}
+
+ free(cookie->buf);
}
- free(cookie->buf);
EXIT_cookie:
free(cookie);