Bug 20165

Summary:	[fixed] tp_base_connection_manager_register has a potential use-after-free
Product:	Telepathy	Reporter:	Simon McVittie <smcv>
Component:	tp-glib	Assignee:	Simon McVittie <smcv>
Status:	RESOLVED FIXED	QA Contact:	Telepathy bugs list <telepathy-bugs>
Severity:	normal
Priority:	high	Keywords:	patch
Version:	unspecified
Hardware:	Other
OS:	All
Whiteboard:
i915 platform:		i915 features:

Description Simon McVittie 2009-02-17 08:38:49 UTC

tp_base_connection_manager_register uses a TpDBusDaemon that it just unreffed.

This wouldn't be a problem in a connection manager that uses tp_run_connection_manager() (because in practice a single TpDBusDaemon is used for the whole run), but it causes failures in one of the telepathy-qt4 regression tests (which instantiates its own TpBaseConnectionManager subclass).

I'm only filing this bug so I can refer to it in telepathy-qt4, so assigning to myself and not spamming telepathy-bugs.

Comment 1 Simon McVittie 2009-02-17 09:11:25 UTC

Fixed in git, will be in 0.7.27.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.