-
Notifications
You must be signed in to change notification settings - Fork 475
Access to previously freed memory #704
Copy link
Copy link
Closed
Description
As full_fname returns a static pointer when it's used twice in the same print message the second call will free the space allocated for by the first full_fname call, causing rsyserr to read freed memory, as in here:
Lines 2044 to 2045 in dacadd5
| rsyserr(FERROR_XFER, errno, "rename %s -> \"%s\" failed", | |
| full_fname(tmpname), full_fname(fname)); |
This may cause gibberish output or potentially even a SIGSEV.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels