new icn messageflickr-free-ic3d pan white
Free invalid pointer | by zachary.cutlip
Back to photostream

Free invalid pointer

sa_parseRcvCmd() calls free() not on char *firmware, but on firmware+ambit header length. This, in some cases, crashes with segfault.

38 views
0 faves
0 comments
Uploaded on April 16, 2015