Fixed #1554752 - Double free of memory, CVE-2018-6952

This commit is contained in:
Than Ngo 2018-09-10 13:27:26 +02:00
parent 677e72bdb1
commit e60be2b017

View File

@ -0,0 +1,13 @@
diff --git a/src/pch.c b/src/pch.c
index e92bc64..a500ad9 100644
--- a/src/pch.c
+++ b/src/pch.c
@@ -2122,7 +2122,7 @@ pch_swap (void)
}
if (p_efake >= 0) { /* fix non-freeable ptr range */
if (p_efake <= i)
- n = p_end - i + 1;
+ n = p_end - p_ptrn_lines;
else
n = -i;
p_efake += n;