Menu ▾ ▴

#1266 Use after free in plugin execdos

3.0 Series
closed-invalid
nobody
None
5
2021-07-30
2021-07-27
René Laan
No

plugin execdos: Version 1.0.1.3 Dec 11 2014
"Use after free" on line 336:

GlobalFree(ptp);
if(szStack) GlobalFree(szStack);

if (ptp->lEndFuncAddress != -1)
ep->ExecuteCodeSegment(ptp->lEndFuncAddress - 1, 0);

Proposed fix:

if(szStack) GlobalFree(szStack);

if (ptp->lEndFuncAddress != -1)
ep->ExecuteCodeSegment(ptp->lEndFuncAddress - 1, 0);
GlobalFree(ptp);

Discussion

  • Anders

    Anders - 2021-07-28
    • status: open --> closed-invalid
     

    • René Laan

      René Laan - 2021-07-29

      Hi Anders, could you state why this bug is invalid?

       

      • Anders

        Anders - 2021-07-29

        This tracker is not for 3rd-party stuff on the wiki. I made a note on the talk page for this plug-in about this bug.

         

        • René Laan

          René Laan - 2021-07-29

          Hi Anders,

          OK clear, thanks.
          Is the link below the talk page? As I do not see a message yet, also I do not see much response upon earlier remarks.
          dosExecute plugin - Page 2 - Winamp & Shoutcast Forumshttp://forums.winamp.com/showthread.php?t=181442&page=2

          With kind regards,

          René Laan
          Software designer | SD14

           

          Last edit: Anders 2021-07-30

          • Anders

            Anders - 2021-07-30
             

Log in to post a comment.

MongoDB Logo MongoDB