summaryrefslogtreecommitdiffstats
path: root/fuzz/xplist-crashes/crash-348c909a0b3532977185f551eb5d2ed04e694883
diff options
context:
space:
mode:
authorGravatar Nikias Bassen2019-08-09 19:59:05 +0200
committerGravatar Nikias Bassen2019-08-09 19:59:05 +0200
commite1a5d60e98b72fe110391da848c77cc36665bd66 (patch)
tree9b3f2bd9960aa0a2e17c8c6d53e53646d7638eec /fuzz/xplist-crashes/crash-348c909a0b3532977185f551eb5d2ed04e694883
parent811a53aefe4693113ef723783c151e473853a398 (diff)
downloadlibplist-e1a5d60e98b72fe110391da848c77cc36665bd66.tar.gz
libplist-e1a5d60e98b72fe110391da848c77cc36665bd66.tar.bz2
Make sure to copy hash table entries properly when cloning array/dict nodes
As mentioned in #142, plist_copy_node() was not correctly handling the hash tables when cloning array or dict nodes; it incorrectly filled the hash table with the original child node info, which effectively would lead to a segmentation fault / UaF if the original array/dict would be freed followed by an attempt to access an element in the new hash table.
Diffstat (limited to 'fuzz/xplist-crashes/crash-348c909a0b3532977185f551eb5d2ed04e694883')
0 files changed, 0 insertions, 0 deletions