Re: [Iup-users] IUP-TRUNK Use After Free (win\iupwin_image.c 887 line)

2020-01-15 Thread Antonio Scuri
Hi, Thanks, but this is an internal callback used only for memory monitoring. It is actually supposed to be called after the handle has been released. Added a few comments. Best, Scuri Em qua., 15 de jan. de 2020 às 08:47, Ranier Vilela escreveu: > Hi, > win\iupwin_image.c (line 887) > >

[Iup-users] IUP-TRUNK Use After Free (win\iupwin_image.c 887 line)

2020-01-15 Thread Ranier Vilela
Hi, win\iupwin_image.c (line 887) handle is freed at line 872, and is passed to function cb if has IMAGEDESTROY_CB. function cb they have no way of knowing that the pointer is invalid! Wouldn't it be better to call cb first, and then release the pointer? regards, Ranier Vilela