diff options
| author | teor (Tim Wilson-Brown) <teor2345@gmail.com> | 2015-11-27 09:31:47 +1100 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2015-11-27 11:54:47 -0500 |
| commit | 3f83ea84c73e5066eaac87080322f13fc0c7ab91 (patch) | |
| tree | a798db03137a7e553720aebed74d8383d6b2e907 | |
| parent | 7a6ed3e65ef6e5f5968ffff59e1a00a0334a886f (diff) | |
| download | tor-3f83ea84c73e5066eaac87080322f13fc0c7ab91.tar.gz tor-3f83ea84c73e5066eaac87080322f13fc0c7ab91.zip | |
Fix use-after-free of stack memory in getinfo_helper_policies
| -rw-r--r-- | src/or/policies.c | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/src/or/policies.c b/src/or/policies.c index a46eb96f8a..126ba465df 100644 --- a/src/or/policies.c +++ b/src/or/policies.c @@ -2165,11 +2165,11 @@ getinfo_helper_policies(control_connection_t *conn, smartlist_t *private_policy_list = smartlist_new(); smartlist_t *configured_addresses = smartlist_new(); - /* Add the configured addresses to the tor_addr_t* list */ - policies_add_ipv4h_to_smartlist(configured_addresses, me->addr); - policies_add_addr_to_smartlist(configured_addresses, &me->ipv6_addr); - policies_add_outbound_addresses_to_smartlist(configured_addresses, - options); + /* Copy the configured addresses into the tor_addr_t* list */ + policies_copy_ipv4h_to_smartlist(configured_addresses, me->addr); + policies_copy_addr_to_smartlist(configured_addresses, &me->ipv6_addr); + policies_copy_outbound_addresses_to_smartlist(configured_addresses, + options); policies_parse_exit_policy_reject_private( &private_policy_list, @@ -2179,7 +2179,7 @@ getinfo_helper_policies(control_connection_t *conn, *answer = policy_dump_to_string(private_policy_list, 1, 1); addr_policy_list_free(private_policy_list); - /* the addresses in configured_addresses are not ours to free */ + SMARTLIST_FOREACH(configured_addresses, tor_addr_t *, a, tor_free(a)); smartlist_free(configured_addresses); } else if (!strcmpstart(question, "exit-policy/")) { const routerinfo_t *me = router_get_my_routerinfo(); |