Bug #68665 [Opn]: Invalid free
| From: | honey at internot dot info | Date: | Sun, 28 Dec 2014 04:01:32 +0000 |
| Subject: | Bug #68665 [Opn]: Invalid free | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-189236@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=68665&edit=1
ID: 68665
User updated by: honey at internot dot info
Reported by: honey at internot dot info
Summary: Invalid free
Status: Open
Type: Bug
Package: *General Issues
Operating System: Linux Ubuntu 14.04
PHP Version: master-Git-2014-12-28 (Git)
Block user comment: N
Private report: N
New Comment:
And in /Zend/zend_language_scanner.l:
1934 s = Z_STRVAL_P(zendlval);
[..]
1938 efree(s);
Previous Comments:
------------------------------------------------------------------------
[2014-12-28 03:54:23] honey at internot dot info
Description:
------------
Hi,
In /ext/fileinfo/libmagic/apprentice.c, an invalid free occurs:
1173 char mfn[MAXPATHLEN];
[..]
1198 efree(mfn);
as an array is not heap allocated, it cannot be freed.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=68665&edit=1