Use-after-free in 2.0.0 under icalrecur_iterator_new()

Milan Crha mcrha at redhat.com
Thu Feb 11 06:11:34 PST 2016


On Wed, 2016-02-10 at 18:48 +0100, Milan Crha wrote:
> I'm using libical 2.0.0 for testing and such and I realized that it's
> easy to let the application

	Hi,
please find the attached proposed patch for the issue.

It defines a new private pool of strings being used
for icalrecurrencetype::rscale. As the pool is shared by all threads,
it is safe to pass the values between them.

The change fixed it for me, but I do not know whether it's good also
for you. Please let me know.

If accepted, I guess it would be good to make a release, 2.0.1 (or
2.0.0.1?) with all the changes since 2.0.0 release, because some of
them were critical (like the build break and eventually this one).
	Thanks and bye,
	Milan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libical.patch
Type: text/x-patch
Size: 5919 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/libical-devel/attachments/20160211/a9a33707/attachment.bin>


More information about the libical-devel mailing list