cktan / tomlc99

TOML C library

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

use after free in e_key_exists_error()

garlick opened this issue · comments

After updating our project's copy of tomlc99 to current master, we noticed some use-after-free type errors when running burntsushi invalid inputs through a unit test that was run under valgrind and asan. It looks like the newkey arg is freed, then passed to e_key_exists_error() in several places.

I'll put a PR up shortly for a fix.

tl;dr:
flux-framework/flux-security#98
flux-framework/flux-core#2630

fixed. see issue #32