Submit #654340: Ogre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routinesinfo

TitelOgre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routines
BeschreibungThe issue arises from a memory management mismatch. The function stbi_write_png_to_mem() allocates its output buffer using malloc (via STBIW_MALLOC). Ogre then wraps this buffer inside MemoryDataStream(data, len, true), which assumes ownership and later frees it with delete[]. Because malloc and delete[] are incompatible allocators, this leads to undefined behavior. AddressSanitizer consistently detects the problem as an alloc-dealloc-mismatch.
Quelle⚠️ https://github.com/OGRECave/ogre/issues/3446
Benutzer
 sand (UID 90194)
Einreichung15.09.2025 08:24 (vor 11 Monaten)
Moderieren26.09.2025 08:40 (11 days later)
StatusAkzeptiert
VulDB Eintrag325958 [OGRECave Ogre bis 14.4.1 OgreSTBICodec.cpp STBIImageCodec::encode Local Privilege Escalation]
Punkte20

Do you know our Splunk app?

Download it now for free!