rt/mergerfs
1
0
Fork 0
mirror of https://github.com/trapexit/mergerfs.git synced 2026-10-26 02:48:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

libfuse: fix use-after-free in fuse_lib_ioctl

Browse source
This commit is contained in:
Antonio SJ Musumeci 2026-04-30 12:11:01 -05:00
parent f71e27644e
commit 3ff9794fff
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
vendored/libfuse/lib/fuse.cpp
View file

@ -3395,7 +3395,6 @@ fuse_lib_ioctl(fuse_req_t *req_,
out_buf = (char*)malloc(out_size); out_buf = (char*)malloc(out_size);
if(!out_buf) if(!out_buf)
goto err; goto err;
DEFER { free(out_buf); };
} }
if(in_buf && out_buf) if(in_buf && out_buf)
@ -3412,10 +3411,11 @@ fuse_lib_ioctl(fuse_req_t *req_,
goto err; goto err;
fuse_reply_ioctl(req_,err,out_buf,out_size); fuse_reply_ioctl(req_,err,out_buf,out_size);
return; goto out;
err: err:
fuse_reply_err(req_,err); fuse_reply_err(req_,err);
out:
free(out_buf);
} }
static static