GNU bug report logs - #68421
Possible use after free in w32notify.c

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Stefan Kangas <stefankangas <at> gmail.com>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#68421: closed (Possible use after free in w32notify.c)
Date: Sat, 13 Jan 2024 09:26:01 +0000

[Message part 1 (text/plain, inline)]

Your message dated Sat, 13 Jan 2024 03:25:44 -0600
with message-id <CADwFkmmRwy5g6JsfTih4EmWHZ6khA8t4wdTjtT1eOsdBMiebkw <at> mail.gmail.com>
and subject line Re: bug#68421: Possible use after free in w32notify.c
has caused the debbugs.gnu.org bug report #68421,
regarding Possible use after free in w32notify.c
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
68421: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=68421
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Stefan Kangas <stefankangas <at> gmail.com>
To: bug-gnu-emacs <at> gnu.org
Subject: Possible use after free in w32notify.c
Date: Sat, 13 Jan 2024 01:49:36 -0600

[Message part 3 (text/plain, inline)]

Could someone familiar with w32notify.c look over the attached patch?

It looks like we are trying to dereference NULL in add_watch, and
returning an already freed value from start_watching.

[w32notify-ub.diff (text/x-diff, attachment)]

[Message part 5 (message/rfc822, inline)]

From: Stefan Kangas <stefankangas <at> gmail.com>
To: Eli Zaretskii <eliz <at> gnu.org>
Cc: 68421-done <at> debbugs.gnu.org
Subject: Re: bug#68421: Possible use after free in w32notify.c
Date: Sat, 13 Jan 2024 03:25:44 -0600

Version: 30.1

Eli Zaretskii <eliz <at> gnu.org> writes:

>> From: Stefan Kangas <stefankangas <at> gmail.com>
>> Date: Sat, 13 Jan 2024 01:49:36 -0600
>>
>> Could someone familiar with w32notify.c look over the attached patch?
>>
>> It looks like we are trying to dereference NULL in add_watch, and
>> returning an already freed value from start_watching.
>
> Feel free to install on master, and thanks.

Thanks, done in commit 893829021bd.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.