#14031: use after freed
----------------------------------+---------------------
Reporter: MegaManSec | Owner:
Type: defect | Status: new
Priority: minor | Milestone:
Component: - Select a component | Version:
Keywords: | Actual Points:
Parent ID: | Points:
----------------------------------+---------------------
test_channel.c
1409 channel_write_cell(ch, cell);
(this frees cell)
[...]
1417 tt_ptr_op(q->u.fixed.cell, ==, cell);
this uses cell.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14031>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
