]> sourceware.org Git - newlib-cygwin.git/commit
git://sourceware.org / newlib-cygwin.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6aef5a4) | patch
Cygwin: load_user_profile: fix use-after-free issue
authorCorinna Vinschen <corinna@vinschen.de>
Fri, 1 Mar 2019 20:04:02 +0000 (21:04 +0100)
committerCorinna Vinschen <corinna@vinschen.de>
Fri, 1 Mar 2019 20:08:44 +0000 (21:08 +0100)
commit7ba9d12a72a722e0f20a80716dbeaf293e66a714
tree28f5129a43adbaf6a323c4529619540287b204f8tree
parent6aef5a46d7f22841e6a859103bb3f8acea060b84commit | diff
Cygwin: load_user_profile: fix use-after-free issue

In case of a local machine account login, pi.lpProfilePath points
to the buffer returned by NetUserGetInfo, but NetApiBufferFree
is called prior to calling LoadUserProfileW.  Fix by copying over
usri3_profile to the local userpath buffer, just as in the AD case.

Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
winsup/cygwin/sec_auth.cc diff | blob | blame | history
newlib and cygwin
This page took 0.030562 seconds and 5 git commands to generate.