Coverity complains about a use after free in libgpo/gpo_lcap.c:ads_get_gpo_list

Richard Sharpe realrichardsharpe at gmail.com
Sat Oct 19 13:17:00 MDT 2013


Hi folks,

That function calls dump_gplink if the DEBUG_LEVEL >= 100, and deep
down in dump_gplink it is possible for a call to free and zero the
parameter ads (SAFE_FREE).

We then go on to pass ads on to other functions because dump_gplink
does not return an error.

So, Coverity complains about it.

The problem is with ads_get_gpo in dump_gplink and it is several levels down.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)


More information about the samba-technical mailing list