Commit: 7f26eab8eb1977dec9e9e1b0d96aa999bfe18528
Parent: ee9dc0d40d4ff64d5576310e22dd95c880011c67
Author: Szymon Janc <szymon.janc@tieto.com>
Committer: Szymon Janc <szymon.janc@tieto.com>
Date: 2014-06-10 12:38:46
Tree: 65a3f0313525b2ea567affc5e4c284191d23adc4

shared/hfp: Fix crash due to invalid free If there are no characters before '\r' memchr() will return pointer matching passed string. This will results either in double free (if '\r' happen to be the first byte in ringbuffer buffer) or in freeing pointer inside ringbuffer buffer (if '\r' is not the first byte).

Diffstat

M src/shared/hfp.c | 4 +++-

1 files changed, 3 insertions(+), 1 deletions(-)

View Full Diff | Patch