| शीर्षक | nnn v5.1 Double Free |
|---|
| विवरण | The code contains a double-free vulnerability in the show_content_in_floating_window function. If the newwin() call fails (returns NULL), the function explicitly frees the content buffer before returning FALSE. However, the caller function also attempts to free the same content pointer unconditionally after the function returns(the return value is false, the loop will exit). This results in the same memory region being freed twice, which can lead to memory corruption or a program crash. |
|---|
| स्रोत | ⚠️ https://github.com/jarun/nnn/issues/2091#issue-3635886658 |
|---|
| उपयोगकर्ता | micromilo (UID 84159) |
|---|
| सबमिशन | 19/11/2025 03:19 PM (11 महीनों पहले) |
|---|
| संयम | 22/11/2025 06:38 PM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 333330 [jarun nnn तक 5.1 nnn/src/nnn.c show_content_in_floating_window/run_cmd_as_plugin बफ़र ओवरफ़्लो] |
|---|
| अंक | 19 |
|---|