Subject: bug#59544: [PATCH] Fixed lib-src/etags.c command execute vulnerability

From: Stefan Kangas <[email-masked]>
Date: Sat, 26 Nov 2022 01:47:25 -0800

lux <[email-masked]> writes:

> 在 2022/11/26 08:43, Stefan Kangas 写道:
>
>  Other than that, LGTM.
>
>> +          char *buf = xmalloc (buf_len);
>
> The buf variable is not released after use, I added free (buf)

Thanks.  I think we should aim to push this security fix ASAP.

Eli, any additional comments on the patch?