use-after-free in open_socket_out

Wayne Davison wayned at
Mon Jul 11 19:19:35 MDT 2011

> res0 is freed but keeps its value so there's access to freed memory
> in res->ai* in the call of inet_ntop if s < 0.

Thanks.  I've commited the fix.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the rsync mailing list