Actions
Bug #2301
closedInMemoryStorage incorrectly iterates over entries
Start date:
12/15/2014
Due date:
% Done:
100%
Estimated time:
Description
In a few places, the following is done in InMemoryStorage:
Cache::iterator it = m_cache.begin();
while (it != m_cache.end()) {
  freeEntry(it);
  it++;
}
freeEntry(it) actually removes entry from m_cache, so it is invalidated and it++ doesn't make sense anymore.
      
      Updated by Davide Pesavento almost 11 years ago
      
    
    Could this be the cause of #2149?
      
      Updated by Alex Afanasyev almost 11 years ago
      
    
    - Related to Bug #2149: Heap-use-after-free in InMemoryStorage added
 
      
      Updated by Alex Afanasyev almost 11 years ago
      
    
    - Status changed from In Progress to New
 - Assignee changed from Alex Afanasyev to Jiewen Tan
 - % Done changed from 50 to 0
 
      
      Updated by Alex Afanasyev almost 11 years ago
      
    
    - Status changed from New to Code review
 - Assignee changed from Jiewen Tan to Alex Afanasyev
 - % Done changed from 0 to 100
 
      
      Updated by Alex Afanasyev almost 11 years ago
      
    
    - Status changed from Code review to Closed
 
Actions