lsm/mdbtools
1
0
Fork 0
mirror of https://github.com/mdbtools/mdbtools.git synced 2025-11-26 02:09:49 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fixed severe double-free bug on mdb_clone_handle with immediate mdb_close() afterwards leading to memory corruption

Browse Source
This commit is contained in:
leecher1337
2017-12-03 17:53:41 +01:00
parent 135f452407
commit 5c32359f3e
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/libmdb/file.c
View File

@@ -327,6 +327,7 @@ MdbHandle *mdb_clone_handle(MdbHandle *mdb)
for (i=0;i<mdb->num_catalog;i++) { for (i=0;i<mdb->num_catalog;i++) {
entry = g_ptr_array_index(mdb->catalog,i); entry = g_ptr_array_index(mdb->catalog,i);
data = g_memdup(entry,sizeof(MdbCatalogEntry)); data = g_memdup(entry,sizeof(MdbCatalogEntry));
data->props = NULL;
g_ptr_array_add(newmdb->catalog, data); g_ptr_array_add(newmdb->catalog, data);
} }
mdb->backend_name = NULL; mdb->backend_name = NULL;