bug#68421: closed (Possible use after free in w32notify.c)

[GNU bug Tracking System]

Your message dated Sat, 13 Jan 2024 03:25:44 -0600
with message-id 
<CADwFkmmRwy5g6JsfTih4EmWHZ6khA8t4wdTjtT1eOsdBMiebkw@mail.gmail.com>
and subject line Re: bug#68421: Possible use after free in w32notify.c
has caused the debbugs.gnu.org bug report #68421,
regarding Possible use after free in w32notify.c
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs@gnu.org.)


-- 
68421: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=68421
GNU Bug Tracking System
Contact help-debbugs@gnu.org with problems

--- Begin Message --- Subject: Possible use after free in w32notify.c Date: Sat, 13 Jan 2024 01:49:36 -0600

Could someone familiar with w32notify.c look over the attached patch?

It looks like we are trying to dereference NULL in add_watch, and
returning an already freed value from start_watching.

w32notify-ub.diff
Description: Text Data

--- End Message ---

> --- Begin Message ---
>
>
>
> Subject: 
>
> Re: bug#68421: Possible use after free in w32notify.c
>
>
>
>
> Date: 
>
> Sat, 13 Jan 2024 03:25:44 -0600
>
>
>
>
> Version: 30.1
>
> Eli Zaretskii <eliz@gnu.org> writes:
>
> >> From: Stefan Kangas <stefankangas@gmail.com>
> >> Date: Sat, 13 Jan 2024 01:49:36 -0600
> >>
> >> Could someone familiar with w32notify.c look over the attached patch?
> >>
> >> It looks like we are trying to dereference NULL in add_watch, and
> >> returning an already freed value from start_watching.
> >
> > Feel free to install on master, and thanks.
>
> Thanks, done in commit 893829021bd.
>
>
> --- End Message ---