Opened 11 years ago

Closed 11 years ago

#5240 closed defect (fixed)

libkml: use after free in kml2FeatureDef()

Reported by: Even Rouault Owned by: Even Rouault
Priority: normal Milestone: 1.10.2
Component: OGR_SF Version: unspecified
Severity: normal Keywords: libkml
Cc:

Description

Coverity 1074116 

        if ( poKmlSimpleField->has_type (  ) ) {
            const string oType = poKmlSimpleField->get_type (  );

            pszType = oType.c_str (  );
        }

pszType is used after the block, whereas oType might have been destroyed (in practice it doesn't seem to be destroyed, but who knows...)

Change History (1)

comment:1 by Even Rouault, 11 years ago

Milestone: → 1.10.2
Resolution: → fixed
Status: new → closed

trunk r26430, branches/1.10 r26431

Note: See TracTickets for help on using tickets.