diff options
| author | Eugene Yudin <e.yudin@ndmsystems.com> | 2019-02-22 19:47:53 +0300 |
|---|---|---|
| committer | Waldemar Brodkorb <wbrodkorb@conet.de> | 2019-03-02 10:49:39 +0100 |
| commit | 5efc10d24e1fb7f59817f007c18219dfc46bf457 (patch) | |
| tree | 27c7f8eb70538d9d5357aa854a77d4a70066063f /libc/stdio/open_memstream.c | |
| parent | ac48ce2b5c4f62ffc7d4986c1c7df17beaa18d64 (diff) | |
Fix NULL pointer dereference in open_memstream()
--000000000000cb1b1305827e5ae0
Content-Type: text/plain; charset="UTF-8"
Hi,
Current version of uClibc-ng has issue in open_memstream() function.
If the cookie variable is NULL (due malloc() fail) then null pointer is
dereferenced after if block.
The attached patch fixes this issue.
--
Best regards,
Eugene
<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,<div><br></div><div>Current version of uClibc-ng has issue in open_memstream() function.</div><div>If the cookie variable is NULL (due malloc() fail) then null pointer is dereferenced after if block.</div><div><br></div><div>The attached patch fixes this issue.<br clear="all"><div>-- <br></div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div><span><div>Best regards,<br></div>Eugene</span></div></div></div></div></div></div></div></div></div>
Diffstat (limited to 'libc/stdio/open_memstream.c')
| -rw-r--r-- | libc/stdio/open_memstream.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libc/stdio/open_memstream.c b/libc/stdio/open_memstream.c index 17ef191cb..71a84138d 100644 --- a/libc/stdio/open_memstream.c +++ b/libc/stdio/open_memstream.c @@ -156,9 +156,10 @@ FILE *open_memstream(char **bufloc, size_t *sizeloc) __STDIO_STREAM_VALIDATE(fp); return fp; } + + free(cookie->buf); } - free(cookie->buf); EXIT_cookie: free(cookie); |