Skip Menu |
 

History Show all quoted text — Show full headers
# Thu Oct 23 10:52:02 2008 tlyu (Taylor Yu) - Ticket created
Subject: Apple patch: null out pointer in string_to_key after free
CC: lha@apple.com
Download (untitled) / with headers
text/plain 50B
Set pointer to null after free in string_to_key.c.
Download LHA-6221628-reset-pointer-after-free.patch
application/octet-stream 726B

Message body not shown because it is not plain text.

# Thu Oct 23 10:52:02 2008 tlyu (Taylor Yu) - Ticket 6247 MemberOf ticket 6204.
# Mon Nov 03 16:05:27 2008 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'
# Mon Nov 03 16:05:27 2008 ghudson@mit.edu (Greg Hudson) - Correspondence added
From: ghudson@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 236B

Apply Apple patch to null out key->contents after freeing on failure,
eliminating the possibility that the pointer will be used after free.

Commit By: ghudson



Revision: 20961
Changed Files:
U trunk/src/lib/crypto/string_to_key.c
# Wed Jan 28 21:52:35 2009 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'
# Fri Jan 30 23:08:20 2009 tlyu (Taylor Yu) - Version_Fixed 1.7 added