ReceiveTempSMS
/
Sweden-Number
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

msvcrt: Fix double-free and memory leak in type_info destructor. 

Spotted by toying with the gcc's static analyzer.

Signed-off-by: Eric Pouech <eric.pouech@gmail.com>
Signed-off-by: Piotr Caban <piotr@codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard@winehq.org>
This commit is contained in:
Eric Pouech 2021-12-16 19:06:48 +01:00 committed by Alexandre Julliard
parent 6c64e6dee4
commit 01111b941d
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
dlls/msvcp90/cxx.h
View File

@ -457,7 +457,7 @@ void * __thiscall type_info_vector_dtor(type_info * _this, unsigned int flags) \
/* we have an array, with the number of elements stored before the first object */ \ /* we have an array, with the number of elements stored before the first object */ \
INT_PTR i, *ptr = (INT_PTR *)_this - 1; \ INT_PTR i, *ptr = (INT_PTR *)_this - 1; \
\ \
for (i = *ptr - 1; i >= 0; i--) free(_this->name); \ for (i = *ptr - 1; i >= 0; i--) free(_this[i].name); \
free(ptr); \ free(ptr); \
} \ } \
else \ else \

2
dlls/msvcrt/cxx.h
View File

@ -291,7 +291,7 @@ void * __thiscall type_info_vector_dtor(type_info * _this, unsigned int flags) \
/* we have an array, with the number of elements stored before the first object */ \ /* we have an array, with the number of elements stored before the first object */ \
INT_PTR i, *ptr = (INT_PTR *)_this - 1; \ INT_PTR i, *ptr = (INT_PTR *)_this - 1; \
\ \
for (i = *ptr - 1; i >= 0; i--) free(_this->name); \ for (i = *ptr - 1; i >= 0; i--) free(_this[i].name); \
free(ptr); \ free(ptr); \
} \ } \
else \ else \