diff options
| author | Rodrigo Arias Mallo <rodarima@gmail.com> | 2025-09-28 20:26:15 +0200 |
|---|---|---|
| committer | Rodrigo <rodarima@gmail.com> | 2025-09-28 23:10:55 +0200 |
| commit | fb510ea86be5ceb9e91573890242581fdbd77ad8 (patch) | |
| tree | d819fe40683592008d136727f5a0b03e48dc1164 /254 | |
Diffstat (limited to '254')
| -rw-r--r-- | 254/index.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/254/index.md b/254/index.md new file mode 100644 index 0000000..13ab55c --- /dev/null +++ b/254/index.md @@ -0,0 +1,9 @@ +Title: Fix heap use after free in TLS conn on errors +Author: rodarima +Created: Wed, 28 Aug 2024 22:43:21 +0000 +State: closed + +When a error causes the TLS connection to fail and stop, the conn struct is free on Tls_close_by_key(), so writing to conn->in_connect is not correct after that point. The solution is to only set the flag when the it is still valid. + +Reported-by: Alex <a1ex@dismail.de> +Link: https://lists.mailman3.com/hyperkitty/list/dillo-dev@mailman3.com/thread/TY2JYCIPC7IQ32U6VC7ZOV3FVFFOE5K3/
\ No newline at end of file |