[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #27803 [Core Tor/Tor]: rust protover_all_supported() double-free of *missing_out

#27803: rust protover_all_supported() double-free of *missing_out
-------------------------+-------------------------------------------------
     Reporter:  teor     |      Owner:  (none)
         Type:  defect   |     Status:  new
     Priority:  Medium   |  Milestone:  Tor: 0.3.5.x-final
    Component:  Core     |    Version:  Tor: 0.3.3.1-alpha
  Tor/Tor                |   Keywords:  rust, protover, memory-safety,
     Severity:  Normal   |  035-must, fast-fix, 033-backport, 034-backport
Actual Points:           |  Parent ID:  #27740
       Points:           |   Reviewer:
      Sponsor:           |
-------------------------+-------------------------------------------------
 `*missing_out` is allocated in Rust, deallocated in Rust (when the
 function returns), used in C, and then freed in C

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27803>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs