Re: [LEDE-DEV] [PATCH] uci: fix a potential use-after-free in uci_set()

2018-03-26 Thread Hans Dedecker
On Sun, Mar 25, 2018 at 3:30 AM, Jordan Miner wrote: > When calling uci_set() to update an option, if ptr->o != NULL and > ptr->option == NULL, then uci_expand_ptr() will set ptr->option to > ptr->o->e.name (or the caller could set ptr->option to that value). In > this case, the option will be fre

Re: [LEDE-DEV] [PATCH] uci: fix a potential use-after-free in uci_set()

2018-03-13 Thread Hans Dedecker
On Tue, Mar 13, 2018 at 3:44 AM, Jordan Miner wrote: > When calling uci_set() to update an option, if ptr->o != NULL and > ptr->option == NULL, then uci_expand_ptr() will set ptr->option to > ptr->o->e.name (or the caller could set ptr->option to that value). In > this case, the option will be fre