URL:
<http://savannah.gnu.org/bugs/?51150>
Summary: Use after free (crypto.c file)
Project: GNU GRUB
Submitted by: appchecker
Submitted on: Wed 31 May 2017 03:09:40 PM UTC
Category: None
Severity: Major
Priority: 5 - Normal
Item Group: None
Status: None
Privacy: Public
Assigned to: None
Originator Name:
Originator Email:
Open/Closed: Open
Discussion Lock: Any
Release:
Release: Git master
Reproducibility: None
Planned Release: None
_______________________________________________________
Details:
Hi!
Please, look "this code
fragment:":http://git.savannah.gnu.org/gitweb/?p=grub.git;a=blob;f=grub-core/normal/crypto.c;h=2bfd67c8ef388097701a7415df3cd7321c6a1e57;hb=HEAD#l150
<pre>
<code class="c">
grub_free (cur);
grub_free (cur->name);
</code>
</pre>
Probably, it should be:
<pre>
<code class="c">
grub_free (cur->name);
grub_free (cur);
</code>
</pre>
This possible defect found by
"AppChecker":npo-echelon.ru/en/solutions/appchecker.php
_______________________________________________________
Reply to this item at:
<http://savannah.gnu.org/bugs/?51150>
_______________________________________________
Message sent via/by Savannah
http://savannah.gnu.org/
_______________________________________________
Bug-grub mailing list
Bug-grub@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-grub
