Loading HuntDB...

Double-free of `trailers_buf' on `Curl_http_compile_trailers()` failure

Medium
C
curl
Submitted None
Reported by thomas_v

Vulnerability Details

Technical details and impact analysis

Double Free
## Summary: When `Curl_http_compile_trailers()` fails, `trailers_buf` is freed twice, because we don't pass to this function the pointer value by reference. ## Steps To Reproduce: Did not actually reproduce, please double check patch attached and analysis. ## Impact Some memory corruption due to the double-free.

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted

Weakness

Double Free