Closed
Bug 566054
Opened 15 years ago
Closed 15 years ago
AsyncChannel can fprintf("%s", uninitialized_char_pointer) under the right conditions
Categories
(Core :: IPC, defect)
Core
IPC
Tracking
()
RESOLVED
FIXED
People
(Reporter: cjones, Assigned: cjones)
References
Details
Attachments
(1 file)
|
1.14 KB,
patch
|
bent.mozilla
:
review+
|
Details | Diff | Splinter Review |
In bug 529005, we added a new channel state ChannelClosing. It's an error to send messages from that state, but we never added a new case the error-message printing code.
This bug looks nasty, but AFAICT the worse that could result is a crash touching -r memory, so not involving [sg].
|
Assignee | |
Comment 1•15 years ago
|
||
Assignee: nobody → jones.chris.g
Attachment #445468 -
Flags: review?(bent.mozilla)
|
||
Updated•15 years ago
|
Attachment #445468 -
Flags: review?(bent.mozilla) → review+
|
|
Assignee | |
Comment 2•15 years ago
|
||
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•