[Poppler-bugs] [Bug 97149] pdfsig: Segfault in ~SignatureHandler / double-free

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=97149

--- Comment #2 from Michael Joost <freedesktop at michael-joost.de> ---
No, this is not a bug of nspr, because subsequent access to freed memory is
most likely a design fault of its users. The only (light) problem of nspr is
that it is debug by default. The DA pattern is most likely intended to identify
such invalid use.

Whether the double-destroy is a genuine problem of nss or pdfsig is not clear
to me; don't know whether it is intended/allowed by nss to manage the same cert
object in several lists. There is a condition in nss testing for NULL, which
prevents the crash without the DA pattern, but this smells for problems.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/poppler-bugs/attachments/20160730/c8bdf89d/attachment.html>