瀏覽代碼

Stack: Fix heap use after free

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11484

Credit to oss-fuzz
Stefan Profanter 6 年之前
父節點
當前提交
f4f8cdc4c3
共有 1 個文件被更改,包括 1 次插入0 次删除
  1. 1 0
      src/ua_types.c

+ 1 - 0
src/ua_types.c

@@ -408,6 +408,7 @@ Variant_clear(UA_Variant *p, const UA_DataType *_) {
         if(p->arrayLength == 0)
             p->arrayLength = 1;
         UA_Array_delete(p->data, p->arrayLength, p->type);
+        p->data = NULL;
     }
     if((void*)p->arrayDimensions > UA_EMPTY_ARRAY_SENTINEL)
         UA_free(p->arrayDimensions);