Opened 12 years ago

Last modified 9 years ago

#4730 closed defect

Double free in OGRTABDataSource::Create() when exiting with error — at Initial Version

Reported by: trentcsc Owned by: warmerdam
Priority: normal Milestone:
Component: OGR_SF Version: unspecified
Severity: normal Keywords: mitab
Cc: Daniel Morissette

Description

Found this in a unit test explicitly trying to create a MapInfo MIF file with the wrong file extension.

MIFFile::m_pszFname is free'd (and not NULL'd) in mitab_miffile.cpp, line 329.

MIFFile::~MIFFile() frees the dangling pointer again and whammo - segfault.

Change History (0)

Note: See TracTickets for help on using tickets.