Opened 11 years ago
Closed 11 years ago
#5240 closed defect (fixed)
libkml: use after free in kml2FeatureDef()
Reported by: | Even Rouault | Owned by: | Even Rouault |
---|---|---|---|
Priority: | normal | Milestone: | 1.10.2 |
Component: | OGR_SF | Version: | unspecified |
Severity: | normal | Keywords: | libkml |
Cc: |
Description
Coverity 1074116
if ( poKmlSimpleField->has_type ( ) ) { const string oType = poKmlSimpleField->get_type ( ); pszType = oType.c_str ( ); }
pszType is used after the block, whereas oType might have been destroyed (in practice it doesn't seem to be destroyed, but who knows...)
Change History (1)
comment:1 by , 11 years ago
Milestone: | → 1.10.2 |
---|---|
Resolution: | → fixed |
Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
trunk r26430, branches/1.10 r26431