mirrors/cosmopolitan
1
0
Fork 0
mirror of https://github.com/jart/cosmopolitan.git synced 2025-08-10 20:00:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

vcscanf: ensure buf is NULL after string decoding

Browse source 
The presence of a pointer in buf could result in double free bugs
when execution reaches the end of the function and it is freed.
This commit is contained in:
Matheus Afonso Martins Moreira 2023-11-02 06:47:45 -03:00
parent 758cdb72da
commit 90f19ed448
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
libc/stdio/vcscanf.c
View file

@ -540,6 +540,7 @@ int __vcscanf(int callback(void *), //
if (ismalloc) { if (ismalloc) {
*va_arg(va, char **) = (void *) buf; *va_arg(va, char **) = (void *) buf;
} }
buf = NULL;
} else { } else {
do { do {
if (isspace(c)) break; if (isspace(c)) break;