[PATCH] dereferencing a freed pointer

msnyder@sonic.net msnyder@sonic.net
Tue Jul 24 19:59:00 GMT 2007


> On Mon, Jul 23, 2007 at 05:58:41PM -0700, msnyder@sonic.net wrote:
>> Flagged by Coverity.  If we don't set the pointer to NULL after calling
>> bfd_stringtab_free, it may get called twice, in which case it will
>> dereference a freed pointer.
>>
>> Unlikely perhaps, but possible.
>
> The same goes for all the other buffers.  The problem was introduced
> with Joseph's 2007-06-29 attribute patch, specifically
> "goto error_return" on a bfd_malloc failure.  We should just return
> false.  Patch to do so preapproved.

Done, as attached.
Thanks.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: false.txt
URL: <https://sourceware.org/pipermail/binutils/attachments/20070724/30a36218/attachment.txt>


More information about the Binutils mailing list