diff options
author | Jo-Philipp Wich <jo@mein.io> | 2020-12-23 19:06:12 +0100 |
---|---|---|
committer | Jo-Philipp Wich <jo@mein.io> | 2021-01-17 21:14:46 +0100 |
commit | d3f2041f4363e76fda57dd6b581eb71cf1a0e114 (patch) | |
tree | be2bf8b4cda53d2baebe7eae1eebee1ec108aabb /sys.c | |
parent | ea7f4717f8b210a8fa491d288ff99ef74409dbff (diff) | |
download | rpcd-d3f2041f4363e76fda57dd6b581eb71cf1a0e114.tar.gz |
uci: manually clear uci_ptr flags after uci_delete() operations
This is required to avoid potential use-after-free errors through the
uci_set()->uci_delete()->uci_expand_ptr() call chain when passing
zero-length strings as values.
Ref: https://bugs.openwrt.org/index.php?do=details&task_id=3528
Suggested-by: olegio170 <olegios170@gmail.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'sys.c')
0 files changed, 0 insertions, 0 deletions