bug-inetutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Free twice in inetutils-1.3.2 telnet.


From: Chris Purnell
Subject: Free twice in inetutils-1.3.2 telnet.
Date: Thu, 27 Jun 2002 12:30:51 +0000
User-agent: Mutt/1.2.5i

In inetutils 1.3.2 the localhost() function in libinetutils remembers it's
return value in a static variable and returns the same value on subsequent
invocations.

In many places this value from localhost() is free()d.  This can result
in an invalid pointer being used and free()d a second time.

An example of this is in the DISPLAY environment variable munging code
in command.c of telnet.  This can cause a crash when a quit command is
issued after a successful connection.

-- 
Christopher John Purnell  | I thought I'd found a reason to live
http://www.lost.org.uk/   | Just like before when I was a child
--------------------------| Only to find that dreams made of sand
What gods do you pray to? | Would just fall apart and slip through my hands



reply via email to

[Prev in Thread] Current Thread [Next in Thread]