diff options
| author | Denys Vlasenko <vda.linux@googlemail.com> | 2016-09-28 23:02:57 +0200 |
|---|---|---|
| committer | Denys Vlasenko <vda.linux@googlemail.com> | 2016-09-28 23:02:57 +0200 |
| commit | 8e2bc47d62d48687f681855d4b086c758ae745c4 (patch) | |
| tree | 5666b8f66ea374d7a7716df9eda2f184f0749914 /TODO | |
| parent | 7ee7c6fc20d3b94c257f829dece097ff339895ee (diff) | |
| download | busybox-8e2bc47d62d48687f681855d4b086c758ae745c4.tar.gz | |
ash: [EVAL] Fix use-after-free in dotrap/evalstring
From upstream:
[EVAL] Fix use-after-free in dotrap/evalstring
The function dotrap calls evalstring using the stored trap string.
If evalstring then unsets that exact trap string then we will end
up using freed memory.
This patch fixes it by making evalstring always duplicate the string
before using it.
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'TODO')
0 files changed, 0 insertions, 0 deletions