[Bug regex/33185] Double-free after memory allocation failure in regcomp bracket expression parsing

fweimer at redhat dot com sourceware-bugzilla@sourceware.org
Tue Jul 22 06:37:09 GMT 2025


https://sourceware.org/bugzilla/show_bug.cgi?id=33185

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED
   Target Milestone|---                         |2.42

--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
Fixed for glibc 2.42 via:

commit 7ea06e994093fa0bcca0d0ee2c1db271d8d7885d
Author: Florian Weimer <fweimer@redhat.com>
Date:   Mon Jul 21 21:43:49 2025 +0200

    posix: Fix double-free after allocation failure in regcomp (bug 33185)

    If a memory allocation failure occurs during bracket expression
    parsing in regcomp, a double-free error may result.

    Reported-by: Anastasia Belova <abelova@astralinux.ru>
    Co-authored-by: Paul Eggert <eggert@cs.ucla.edu>
    Reviewed-by: Andreas K. Huettel <dilfridge@gentoo.org>

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list