[Users] [Bug 3598] use after free in function summary_execute_move_func()

noreply at thewildbeast.co.uk noreply at thewildbeast.co.uk
Fri Apr 1 16:36:30 CEST 2016


Hanno Boeck <hanno at hboeck.de> changed:

           What    |Removed                     |Added
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---

--- Comment #9 from Hanno Boeck <hanno at hboeck.de> ---
Unfortunately it seems this fix is not enough. I am still able to reproduce
this issue with the latest git code.

I assume the reason is that the pointer is copied around at some point and
although it's nulled on freeing the copy will still be accessed. I'm attaching
an asan crash dump.

Not sure how to debug this further. Unfortunately I'm still not able to
reliably reproduce this, but it happens usually after moving around and
deleting a few messages in my inbox.

You are receiving this mail because:
You are the assignee for the bug.

More information about the Users mailing list