Date: Thu, 14 May 2009 23:09:33 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: cvs-src-old@freebsd.org Subject: cvs commit: src/lib/libc/gen getcap.c Message-ID: <200905142309.n4EN9fCO094924@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
delphij 2009-05-14 23:09:33 UTC
FreeBSD src repository
Modified files:
lib/libc/gen getcap.c
Log:
SVN rev 192129 on 2009-05-14 23:09:33Z by delphij
As the comment says, close() frees the variable, record. So we obtain
the length by evaluating the value from the copy, cbuf instead. This
fixes a crash caused by previous commit (use-after-free)
Submitted by: Dimitry Andric <dimitry andric com>
Pointy hat to: delphij
Revision Changes Path
1.22 +1 -1 src/lib/libc/gen/getcap.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200905142309.n4EN9fCO094924>