use-after-free in open_socket_out

Wayne Davison wayned at samba.org
Mon Jul 11 19:19:35 MDT 2011


>
> res0 is freed but keeps its value so there's access to freed memory
> in res->ai* in the call of inet_ntop if s < 0.
>

Thanks.  I've commited the fix.

..wayne..
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/rsync/attachments/20110711/7a5920b2/attachment.html>


More information about the rsync mailing list