[Snort-devel] bug in sfutil/sfrt.c

Mitesh Jadia mitesh.jadia at ...2499...
Tue Mar 12 01:46:08 EDT 2013


version snort-2.9.2

FUNCTION:

table_t *sfrt_new(char table_type, char ip_type, long data_size, uint32_t
mem_cap)

at the end of this function (*use after free found. SUP_IP6 is enabled)*
*
*
#ifdef SUP_IP6
    if (!table->rt6)
    {
        table->free( table->rt );
        free(table->data);
        free(table);
    }
#endif

    return table;
}
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20130312/529d1f16/attachment.html>


More information about the Snort-devel mailing list