[PATCH] regcomp: fix double free in parse_bracket_exp()

Florian Weimer fweimer@redhat.com
Thu Jun 26 14:34:44 GMT 2025


* Anastasia Belova:

> Double free happens when work_tree = NULL: before the check
> and after parse_bracket_exp_free_return free_charset() is called.
> Move first call after the check and goto.

Do you have a test case for this?

Thanks,
Florian



More information about the Libc-alpha mailing list