Actions
Bug #2301
closedInMemoryStorage incorrectly iterates over entries
Start date:
12/15/2014
Due date:
% Done:
100%
Estimated time:
Description
In a few places, the following is done in InMemoryStorage:
Cache::iterator it = m_cache.begin();
while (it != m_cache.end()) {
freeEntry(it);
it++;
}
freeEntry(it)
actually removes entry from m_cache, so it
is invalidated and it++
doesn't make sense anymore.
Updated by Davide Pesavento almost 10 years ago
Could this be the cause of #2149?
Updated by Alex Afanasyev almost 10 years ago
- Related to Bug #2149: Heap-use-after-free in InMemoryStorage added
Updated by Alex Afanasyev almost 10 years ago
- Status changed from In Progress to New
- Assignee changed from Alex Afanasyev to Jiewen Tan
- % Done changed from 50 to 0
Updated by Alex Afanasyev almost 10 years ago
- Status changed from New to Code review
- Assignee changed from Jiewen Tan to Alex Afanasyev
- % Done changed from 0 to 100
Updated by Alex Afanasyev almost 10 years ago
- Status changed from Code review to Closed
Actions