[taler-anastasis] branch master updated: fix use after free

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository anastasis.

The following commit(s) were added to refs/heads/master by this push:
     new 350d608  fix use after free
350d608 is described below

commit 350d60846bb87140ee0291a31fa5a589710d7451
Author: Christian Grothoff <grothoff@gnunet.org>
AuthorDate: Sun Mar 14 21:25:49 2021 +0100

    fix use after free
---
 src/reducer/anastasis_api_recovery_redux.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/src/reducer/anastasis_api_recovery_redux.c 
b/src/reducer/anastasis_api_recovery_redux.c
index f10566b..90f1785 100644
--- a/src/reducer/anastasis_api_recovery_redux.c
+++ b/src/reducer/anastasis_api_recovery_redux.c
@@ -1531,7 +1531,17 @@ free_rss (void *cls)
 {
   struct RecoverSecretState *rss = cls;
   struct PolicyDownloadEntry *pd;
+  struct RecoveryStartStateProviderEntry *pe;
 
+  while (NULL != (pe = rss->pe_head))
+  {
+    GNUNET_CONTAINER_DLL_remove (rss->pe_head,
+                                 rss->pe_tail,
+                                 pe);
+    ANASTASIS_redux_action_cancel (pe->ra);
+    rss->pending--;
+    GNUNET_free (pe);
+  }
   while (NULL != (pd = rss->pd_head))
   {
     GNUNET_CONTAINER_DLL_remove (rss->pd_head,
@@ -1547,6 +1557,7 @@ free_rss (void *cls)
   }
   json_decref (rss->state);
   json_decref (rss->id_data);
+  GNUNET_assert (0 == rss->pending);
   GNUNET_free (rss);
 }
 

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.