projects / oweals / opkg-lede.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fbd8dd1) | patch
libopkg: fix use-after-free with duplicate packages on the command line
authorJo-Philipp Wich <jo@mein.io>
Fri, 10 Feb 2017 10:04:10 +0000 (11:04 +0100)
committerJo-Philipp Wich <jo@mein.io>
Fri, 10 Feb 2017 10:04:10 +0000 (11:04 +0100)
commit1c02cdf4b0c932edc4180199057416363aa7048a
tree89d897567ecf76e7c1cc6599631ecb4d6a50a2a8tree | snapshot
parentfbd8dd1a27d142720f49f0f7566daa6b8449e583commit | diff
libopkg: fix use-after-free with duplicate packages on the command line

When the same package file is specified multiple times on the opkg install
command line, the name pointer on the argv array becomes stale after the
package structures have been merged, leading to invalid memory accesses
upon install.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
libopkg/opkg_download.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.