[Bug 782648] New: heap-use-after-free in gst_debug_print_object() spotted by Asan

GStreamer (GNOME Bugzilla) bugzilla at gnome.org
Mon May 15 08:36:18 UTC 2017


https://bugzilla.gnome.org/show_bug.cgi?id=782648

            Bug ID: 782648
           Summary: heap-use-after-free in gst_debug_print_object()
                    spotted by Asan
    Classification: Platform
           Product: GStreamer
           Version: unspecified
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: gstreamer (core)
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: fabrice at bellet.info
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

Created attachment 351856
  --> https://bugzilla.gnome.org/attachment.cgi?id=351856&action=edit
heap-use-after-free in gstvalue.c

Hi,

Asan found a couple of use after free cases when we print an object name,
mainly when debugging level is high enough. There's a possibility that the name
is read after the old pointer is freed and before the new one is assigned in
gst_object_set_name().

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.


More information about the gstreamer-bugs mailing list