New subject: [Issue 10328] Possible multiple free() calls in rewrite_subst_compile()

16 Apr 2025


      https://bugs.openldap.org/show_bug.cgi?id=10328
Issue ID: 10328
           Summary: Possible multiple free() calls in
                    rewrite_subst_compile()
           Product: OpenLDAP
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: libraries
          Assignee: bugs@openldap.org
          Reporter: gyf161023@gmail.com
  Target Milestone: ---
In rewrite_subst_compile() of libraries/librewrite/subst.c line 216 and 222,
`subs` and `submatch` array are freed repeatedly on the index `nsub` instead of
l, is this what was intended or the `nsub` has some guarantee to be 1 so that
we are not freeing anything for second time?
-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 10328] New: Possible multiple free() calls in rewrite_subst_compile()