GNU GRUB - Bugs: bug #51150, Use after free (crypto.c file)
You are not allowed to post comments on this tracker with your current authentication level.
bug #51150: Use after free (crypto.c file)
Submitter: | AppChecker <appchecker> | ||
Submitted: | Wed 31 May 2017 03:09:40 PM UTC | ||
Category: | None | Severity: | Major |
Priority: | 5 - Normal | Item Group: | None |
Status: | Fixed | Privacy: | Public |
Assigned to: | None | Originator Name: | |
Open/Closed: | Closed | Release: | Git master |
Release: | Reproducibility: | None | |
Planned Release: | None |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Carbon-Copy List
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 2 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2017-07-09 | phcoder | Status | None | Fixed | |
Open/Closed | Open | Closed |
Powered by Savane 3.13-758e.
Corresponding source code
Hi!
Please, look "this code fragment:":http://git.savannah.gnu.org/gitweb/?p=grub.git;a=blob;f=grub-core/normal/crypto.c;h=2bfd67c8ef388097701a7415df3cd7321c6a1e57;hb=HEAD#l150
<pre>
<code class="c">
grub_free (cur);
grub_free (cur->name);
</code>
</pre>
Probably, it should be:
<pre>
<code class="c">
grub_free (cur->name);
grub_free (cur);
</code>
</pre>
This possible defect found by "AppChecker":npo-echelon.ru/en/solutions/appchecker.php