bugGNU Wget - Bugs: bug #46479, null pointer dereference:...

 
 

bug #46479: null pointer dereference: gnutls_free (ctx->session_data->data)

Submitted by:  Sami Farin <Safari>
Submitted on:  Thu 19 Nov 2015 07:59:57 PM UTC  
 
Category: Crash/Freeze/InfloopSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Closed
Release: NoneOperating System: None
Reproducibility: NoneFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 20 Nov 2015 07:06:18 PM UTC, comment #3:

You "forgot" credits and reference to bug #46479 in the git changelog.

Sami Farin <Safari>
Fri 20 Nov 2015 06:53:05 PM UTC, comment #2:

thanks, the patch looks correct and I pushed it.

Giuseppe Scrivano <gscrivano>
Project Administrator
Fri 20 Nov 2015 05:40:28 PM UTC, comment #1:

The attached patch should fix it. Thanks for the report.

(file #35506)

Ander Juaristi <ajuaristi>
Thu 19 Nov 2015 07:59:57 PM UTC, original submission:

I did not read enough code to be able to say conclusively can the deref happen.

if (!ctx || !ctx->session_data || gnutls_session_set_data (session, ctx->session_data->data, ctx->session_data->size))
{
/* server does not want to continue the session */
gnutls_free (ctx->session_data->data);

Sami Farin <Safari>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by gscrivano (Posted a comment)
  • -unavailable- added by ajuaristi (Updated the item)
  • -unavailable- added by Safari (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Fri 20 Nov 2015 06:53:05 PM UTCgscrivanoOpen/ClosedOpen=>Closed
    Fri 20 Nov 2015 05:40:28 PM UTCajuaristiAttached File-=>Added 0001-Fix-potential-NULL-pointer-dereference.patch, #35506

    Back to the top


    Powered by Savane 3.1-cleanup1