about summary refs log tree commit diff
path: root/sysdeps
diff options
context:
space:
mode:
authorRomain Geissler <romain.geissler@amadeus.com>2023-09-25 01:21:51 +0100
committerSiddhesh Poyarekar <siddhesh@sourceware.org>2023-09-26 13:11:46 -0400
commit856bac55f98dc840e7c27cfa82262b933385de90 (patch)
tree019e37e673856403d39b81a2ccbcb127c580ba66 /sysdeps
parenta9728f798ec7f05454c95637ee6581afaa9b487d (diff)
downloadglibc-856bac55f98dc840e7c27cfa82262b933385de90.tar.gz
glibc-856bac55f98dc840e7c27cfa82262b933385de90.tar.xz
glibc-856bac55f98dc840e7c27cfa82262b933385de90.zip
Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843]
This patch fixes a very recently added leak in getaddrinfo.

This was assigned CVE-2023-5156.

Resolves: BZ #30884
Related: BZ #30842

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
(cherry picked from commit ec6b95c3303c700eb89eebeda2d7264cc184a796)
Diffstat (limited to 'sysdeps')
-rw-r--r--sysdeps/posix/getaddrinfo.c4
1 files changed, 1 insertions, 3 deletions
diff --git a/sysdeps/posix/getaddrinfo.c b/sysdeps/posix/getaddrinfo.c
index 7a43a3bf4c..f975dcd2bc 100644
--- a/sysdeps/posix/getaddrinfo.c
+++ b/sysdeps/posix/getaddrinfo.c
@@ -1196,9 +1196,7 @@ free_and_return:
   if (malloc_name)
     free ((char *) name);
   free (addrmem);
-  if (res.free_at)
-    free (res.at);
-  free (res.canon);
+  gaih_result_reset (&res);
 
   return result;
 }