Menu ▾ ▴

#7 Use after free detected in DoForAllConstructs

1.0
closed
None
2015-05-16
2015-05-13
Chad Woolf
No

I found a use-after-free violation in DoForAllConstructs, when it's being passed one of the destruction functions (and MEM_TABLE_SIZE=0 for debugging). I was able to fix it with the following workaround, but I'm not sure that's the best option because it would fall over if any of the supplied functions need to modify "next". The only better fix would be the change the signature of the functions we pass to include what "next" is supposed to be.

1 Attachments

Discussion

  • Gary Riley

    Gary Riley - 2015-05-16

    This fix is fine had has been checked into subversion. The functions passed into DoForAllConstructs don't change the next pointer.

     
  • Gary Riley

    Gary Riley - 2015-05-16
    • status: new --> closed
    • assigned_to: Gary Riley
     

Log in to post a comment.