[njs] A fix of use-after-free memory bug.

Igor Sysoev igor at sysoev.ru
Fri Sep 16 14:54:27 UTC 2016


details:   http://hg.nginx.org/njs/rev/70e3b2fc7a8d
branches:  
changeset: 175:70e3b2fc7a8d
user:      Igor Sysoev <igor at sysoev.ru>
date:      Thu Sep 15 17:37:52 2016 +0300
description:
A fix of use-after-free memory bug.

diffstat:

 njs/njs_vm.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (19 lines):

diff -r 16cc1aaf4e47 -r 70e3b2fc7a8d njs/njs_vm.c
--- a/njs/njs_vm.c	Thu Sep 15 17:34:34 2016 +0300
+++ b/njs/njs_vm.c	Thu Sep 15 17:37:52 2016 +0300
@@ -2588,7 +2588,6 @@ njs_vmcode_continuation(njs_vm_t *vm, nj
         skip = frame->skip;
 
         vm->frame = njs_function_previous_frame(frame);
-        (void) njs_function_frame_free(vm, frame);
 
         /*
          * If a retval is in a callee arguments scope it
@@ -2606,6 +2605,7 @@ njs_vmcode_continuation(njs_vm_t *vm, nj
         }
 
         vm->current = cont->return_address;
+        (void) njs_function_frame_free(vm, frame);
 
         return 0;
 



More information about the nginx-devel mailing list