[mythtv-commits] Ticket #11556: Fix for use after free bug in ParseText.cpp (potential memory corruption/crash)

MythTV noreply at mythtv.org
Tue Jun 4 21:23:45 UTC 2013


#11556: Fix for use after free bug in ParseText.cpp (potential memory
corruption/crash)
-------------------------------------+-------------------------------------
 Reporter:  Gary Buhrmaster          |          Owner:  Gary Buhrmaster
  <gary.buhrmaster@…>                |  <gary.buhrmaster@…>
     Type:  Patch - Bug Fix          |         Status:  closed
 Priority:  minor                    |      Milestone:  unknown
Component:  MythTV - General         |        Version:  Master Head
 Severity:  medium                   |     Resolution:  fixed
 Keywords:                           |  Ticket locked:  0
-------------------------------------+-------------------------------------
Changes (by Gary Buhrmaster <gary.buhrmaster@…>):

 * owner:   => Gary Buhrmaster <gary.buhrmaster@…>
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:63687f832a105956e8e070306cc81d85b5f9945e/mythtv]:
 {{{
 #!CommitTicketReference repository="mythtv"
 revision="63687f832a105956e8e070306cc81d85b5f9945e"
 Fix use after free (realloc) in ParseText.cpp

 Static analysis detected a use after free (realloc).  The
 member variable should use the new string address, and it
 is assigned the new string address after the usage.  This
 looks to be a copy/paste error sometime in the past.  In
 addition, follow the stated convention and null terminate
 the string, just in case.
 (cherry picked from commit df4aef6acf73e31f6399ce4c30c2d508e26c72a1)

 Signed-off-by: Stuart Morgan <smorgan at mythtv.org>

 Fixes #11556
 }}}

-- 
Ticket URL: <http://code.mythtv.org/trac/ticket/11556#comment:1>
MythTV <http://code.mythtv.org/trac>
MythTV Media Center


More information about the mythtv-commits mailing list