[Pkg-gnupg-maint] Bug#773472: Fwd: (not "use after free, and double free")

Joshua Rogers honey at internot.info
Thu Dec 18 18:33:19 UTC 2014


Package: gnupg2
Version: 2.1.1
Severity: normal

Hi,

In minip12.c, on line 2184, 'pwbuf' is freed, and then "goto failure;" is run.
failure: checks whether 'pwbuf' is set or not, and if it is, re-wipes it. Under the line 2184, it will not run it, but there is no need for the test if it's going to be freed beforehand. (In reality, it shouldn't be freed before it is sent to failure;)

Thanks,

-- 
-- Joshua Rogers <https://internot.info/>



More information about the Pkg-gnupg-maint mailing list