Bug 20165 - [fixed] tp_base_connection_manager_register has a potential use-after-free
Summary: [fixed] tp_base_connection_manager_register has a potential use-after-free
Status: RESOLVED FIXED
Alias: None
Product: Telepathy
Classification: Unclassified
Component: tp-glib (show other bugs)
Version: unspecified
Hardware: Other All
: high normal
Assignee: Simon McVittie
QA Contact: Telepathy bugs list
URL:
Whiteboard:
Keywords: patch
Depends on:
Blocks:
 
Reported: 2009-02-17 08:38 UTC by Simon McVittie
Modified: 2009-03-17 14:52 UTC (History)
0 users

See Also:
i915 platform:
i915 features:


Attachments

Description Simon McVittie 2009-02-17 08:38:49 UTC
tp_base_connection_manager_register uses a TpDBusDaemon that it just unreffed.

This wouldn't be a problem in a connection manager that uses tp_run_connection_manager() (because in practice a single TpDBusDaemon is used for the whole run), but it causes failures in one of the telepathy-qt4 regression tests (which instantiates its own TpBaseConnectionManager subclass).

I'm only filing this bug so I can refer to it in telepathy-qt4, so assigning to myself and not spamming telepathy-bugs.
Comment 1 Simon McVittie 2009-02-17 09:11:25 UTC
Fixed in git, will be in 0.7.27.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.