Opened 7 years ago

Closed 7 years ago

#13186 closed bug (fixed)

[Patch] add-ons/kernel/drivers/bluetooth/h2/h2generic/h2generic.cpp: fix use after free.

Reported by: mt Owned by: nobody
Priority: normal Milestone: Unscheduled
Component: Drivers Version: R1/Development
Keywords: bluetooth Cc:
Blocked By: Blocking:
Platform: All

Description

At line 153 [1], spawn_device() returns address which is freed at line 151 [2].

[1] ​http://cgit.haiku-os.org/haiku/tree/src/add-ons/kernel/drivers/bluetooth/h2/h2generic/h2generic.cpp#n153 [2] ​http://cgit.haiku-os.org/haiku/tree/src/add-ons/kernel/drivers/bluetooth/h2/h2generic/h2generic.cpp#n151

Attachments (2)

0040-h2generic.cpp-fix-use-after-free.patch​ (787 bytes ) - added by mt 7 years ago.
report-66ee5b.html​ (122.5 KB ) - added by mt 7 years ago.
Report by Clang Static Analyzer

Download all attachments as: .zip

Change History (5)

by mt, 7 years ago

Attachment: 0040-h2generic.cpp-fix-use-after-free.patch​ added

comment:1 by mt, 7 years ago

patch: 0 → 1

by mt, 7 years ago

Attachment: report-66ee5b.html​ added

Report by Clang Static Analyzer

comment:2 by korli, 7 years ago

Patch is OK.

comment:3 by waddlesplash, 7 years ago

Resolution: → fixed
Status: new → closed

Applied in hrev50857. Thanks!

Note: See TracTickets for help on using tickets.