From 3ff9794fff17b3a2e8c764135916b143f9e58911 Mon Sep 17 00:00:00 2001 From: Antonio SJ Musumeci Date: Thu, 30 Apr 2026 12:11:01 -0500 Subject: [PATCH] libfuse: fix use-after-free in fuse_lib_ioctl --- vendored/libfuse/lib/fuse.cpp | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/vendored/libfuse/lib/fuse.cpp b/vendored/libfuse/lib/fuse.cpp index 2b9bd19d..3fef8b77 100644 --- a/vendored/libfuse/lib/fuse.cpp +++ b/vendored/libfuse/lib/fuse.cpp @@ -3395,7 +3395,6 @@ fuse_lib_ioctl(fuse_req_t *req_, out_buf = (char*)malloc(out_size); if(!out_buf) goto err; - DEFER { free(out_buf); }; } if(in_buf && out_buf) @@ -3412,10 +3411,11 @@ fuse_lib_ioctl(fuse_req_t *req_, goto err; fuse_reply_ioctl(req_,err,out_buf,out_size); - return; - + goto out; err: fuse_reply_err(req_,err); + out: + free(out_buf); } static