[PATCH] gzerror() after gzclose_r() is a use after free

David Bremner david at tethera.net
Thu Apr 16 04:11:56 PDT 2020


Olivier Taïbi <oli at olitb.net> writes:

> As suggested by David Bremner in
> https://notmuchmail.org/pipermail/notmuch/2020/029288.html
> here is a separate patch for bug #2: calling gzerror() (indirectly via
> gzerror_str()) after gzclose_r is a use after free, according to zlib's manual.

pushed, with revised commit message

d


More information about the notmuch mailing list