[srvx-bugs] [ srvx-Bugs-2579877 ] Double free in addbadword

[SourceForge.net <no...@so...>]

Bugs item #2579877, was opened at 2009-02-08 15:13
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=403001&aid=2579877&group_id=31654

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: OperServ
Group: 1.4
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: David Herrmann (dvdhrm)
Assigned to: Entrope (entrope)
Summary: Double free in addbadword

Initial Comment:
opserv.c line 2054 vanilla-srvx-1.4-rc3 frees a value which was already freed two lines before. It is first deleted from the string_list and then freed manually. Removing line 2054 should fix this.

It occurs when you add a new "badword" which is more general than another "badword". The less-general "badword" is removed and double freed.


Simply removing line 2054 would fix the bug.


David Herrmann (gix)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=403001&aid=2579877&group_id=31654