[tor-bugs] #27803 [Core Tor/Tor]: rust protover_all_supported() double-free of *missing_out
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Sep 20 23:39:11 UTC 2018
#27803: rust protover_all_supported() double-free of *missing_out
-------------------------+-------------------------------------------------
Reporter: teor | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.5.x-final
Component: Core | Version: Tor: 0.3.3.1-alpha
Tor/Tor | Keywords: rust, protover, memory-safety,
Severity: Normal | 035-must, fast-fix, 033-backport, 034-backport
Actual Points: | Parent ID: #27740
Points: | Reviewer:
Sponsor: |
-------------------------+-------------------------------------------------
`*missing_out` is allocated in Rust, deallocated in Rust (when the
function returns), used in C, and then freed in C
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27803>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list