Skip to content

textfilecontent54 probe: fix memory leaks in process_file#2370

Open
edznux-dd wants to merge 1 commit into
OpenSCAP:mainfrom
edznux-dd:fix/textfilecontent54-leak
Open

textfilecontent54 probe: fix memory leaks in process_file#2370
edznux-dd wants to merge 1 commit into
OpenSCAP:mainfrom
edznux-dd:fix/textfilecontent54-leak

Conversation

@edznux-dd

Copy link
Copy Markdown
Contributor

Found by fuzzing process_file() under ASan/LSan (see harnesses in #2365)

  • create_item()'s returned object was passed to SEXP_list_add(), which takes its own reference, but the caller's reference was never released -> every collected item leaked. Free our reference after adding.
  • The items accumulator list itself was never freed on return. Free it at cleanup; collected items are owned by the probe result object, so this only releases the list's references (and frees any uncollected items).

Found by fuzzing process_file() under ASan/LSan.

- create_item()'s returned object was passed to SEXP_list_add(), which
  takes its own reference, but the caller's reference was never released
  -> every collected item leaked. Free our reference after adding.
- The items accumulator list itself was never freed on return. Free it
  at cleanup; collected items are owned by the probe result object, so
  this only releases the list's references (and frees any uncollected
  items).
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant