[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Free twice in inetutils-1.3.2 telnet.
From: |
Chris Purnell |
Subject: |
Free twice in inetutils-1.3.2 telnet. |
Date: |
Thu, 27 Jun 2002 12:30:51 +0000 |
User-agent: |
Mutt/1.2.5i |
In inetutils 1.3.2 the localhost() function in libinetutils remembers it's
return value in a static variable and returns the same value on subsequent
invocations.
In many places this value from localhost() is free()d. This can result
in an invalid pointer being used and free()d a second time.
An example of this is in the DISPLAY environment variable munging code
in command.c of telnet. This can cause a crash when a quit command is
issued after a successful connection.
--
Christopher John Purnell | I thought I'd found a reason to live
http://www.lost.org.uk/ | Just like before when I was a child
--------------------------| Only to find that dreams made of sand
What gods do you pray to? | Would just fall apart and slip through my hands
- Free twice in inetutils-1.3.2 telnet.,
Chris Purnell <=