Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent double free by crafted fences. #438

Merged
merged 1 commit into from Mar 29, 2017

Conversation

Projects
None yet
3 participants
@michalsrb
Copy link
Contributor

commented Mar 27, 2017

If client sent fence with some data, followed by fence with no data (length 0), the original fence data were freed, but the pointer kept pointing at them. Sending one more fence would attempt to free them again.

fixes #437

Prevent double free by crafted fences.
If client sent fence with some data, followed by fence with no data (length 0), the original fence data were freed, but the pointer kept pointing at them. Sending one more fence would attempt to free them again.

@CendioOssman CendioOssman merged commit f3afa24 into TigerVNC:master Mar 29, 2017

@michalsrb michalsrb deleted the michalsrb:fix-double-free-fences branch Mar 29, 2017

@carnil

This comment has been minimized.

Copy link

commented Apr 1, 2017

This has been assigned CVE-2017-7393

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.