diff options
| author |  Nikias Bassen | 2015-01-31 20:19:40 +0100 |
|---|---|---|
| committer | Nikias Bassen | 2015-01-31 20:19:40 +0100 |
| commit | 9da6e82da3552daf27bf50cc3308bdac886dc28d (patch) | |
| tree | d5b1b6875e4e9ded9e1f5b7edca7a7578cce0bc3 /fuzz/xplist-crashes/crash-a8b44e1f5be4f75f00a937016ec5405bce77a0f9 | |
| parent | 3c4bf492e5211e4196de872b823370670d8c56fc (diff) | |
| download | libplist-9da6e82da3552daf27bf50cc3308bdac886dc28d.tar.gz libplist-9da6e82da3552daf27bf50cc3308bdac886dc28d.tar.bz2 | |
bplist: Fix possible crash in plist_from_bin() caused by access to already freed memory
Given a specifically ordered binary plist the function plist_from_bin() would
free BPLIST_DICT or BPLIST_ARRAY raw node data that is still required for
parsing of following nodes. This commit addresses this issues by moving the
memory free to the end of the parsing process.
Diffstat (limited to 'fuzz/xplist-crashes/crash-a8b44e1f5be4f75f00a937016ec5405bce77a0f9')
0 files changed, 0 insertions, 0 deletions