Hi Axel, thanks for your bug report. Would you be able to provide a patch?
Kind regards Andreas. On Sat, Jul 18, 2015 at 11:37:32PM +0200, Axel Wagner wrote: > I found a possible use after free in the usage of wordexp: > http://sources.debian.net/src/disulfinder/1.2.11-4/disulfind/src/disulfinder.h/?hl=154#L154 > > wordfree(&p) should actually free p.we_wordv[0], so using rootdir after this > should be a UAF. -- http://fam-tille.de -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org