[Pidgin] #14775: Double free in jabber_iq_signal_register and jabber_iq_signal_unregister

Pidgin trac at pidgin.im
Mon Nov 28 20:47:13 EST 2011


#14775: Double free in jabber_iq_signal_register and jabber_iq_signal_unregister
--------------------------+-------------------------------------------------
 Reporter:  pathorn       |     Owner:  rekkanoryo
     Type:  defect        |    Status:  new       
Component:  unclassified  |   Version:  2.10.0    
 Keywords:                |  
--------------------------+-------------------------------------------------
 These functions do an explicit g_free on the key in the case that the
 items were already present in the g_hash_table and therefore were not
 newly inserted.

 However, according to glib docs at:
 http://developer.gnome.org/glib/2.30/glib-Hash-Tables.html#g-hash-table-
 insert

 g_hash_table_insert will free the keys in the case that they are already
 present. This causes a double free, and crashes pidgin if I am using a
 jabber plugin that registers a second handler for an iq signal.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14775>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list