Closed Bug 1019948 Opened 10 years ago Closed 3 years ago

Use-after-free in pkg_createWithAssemblyCode

Categories

(Core :: JavaScript: Internationalization API, defect)

Product:
Core
Component:
JavaScript: Internationalization API
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: mccr8, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: coverity, csectype-uaf, sec-other) 

This code frees a string |cmd|, then prints it out:

    uprv_free(cmd);
    if (result != 0) {
        fprintf(stderr, "Error creating with assembly code. Failed command: %s\n", cmd);

I'm marking this as sec-other, because I assume this is part of some build step, and is not code that we ship with Firefox.  If that's really the case, this bug can be unhidden.
Well, I meant to hide that...
Group: core-security
Group: core-security → javascript-core-security

Fixed by Bug 1610512 (ICU 66 update)

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Group: javascript-core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.