Skip to content

Commit

Permalink
[frame.c] use-after-free fix
Browse files Browse the repository at this point in the history
Oops, didn't recognise ud == sr_data, so didn't see the use-after-free.
  • Loading branch information
bdw committed Jun 6, 2018
1 parent 5835aa7 commit c58dadb
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion src/core/frame.c
Expand Up @@ -1018,8 +1018,9 @@ static void continue_unwind(MVMThreadContext *tc, void *sr_data) {
MVMFrame *frame = ud->frame;
MVMuint8 *abs_addr = ud->abs_addr;
MVMuint32 rel_addr = ud->rel_addr;
void *jit_return_label = ud->jit_return_label;
MVM_free(sr_data);
MVM_frame_unwind_to(tc, frame, abs_addr, rel_addr, NULL, ud->jit_return_label);
MVM_frame_unwind_to(tc, frame, abs_addr, rel_addr, NULL, jit_return_label);
}
void MVM_frame_unwind_to(MVMThreadContext *tc, MVMFrame *frame, MVMuint8 *abs_addr,
MVMuint32 rel_addr, MVMObject *return_value, void *jit_return_label) {
Expand Down

0 comments on commit c58dadb

Please sign in to comment.