Opened 12 years ago

Closed 12 years ago

Last modified 12 years ago

#2887 closed Bug (fixed)

dangling pointer in 1.81

Reported by: charles Owned by: charles
Priority: Normal Milestone: 1.90
Component: libtransmission Version: 1.81
Severity: Major Keywords: backport-1.8x
Cc:

Description (last modified by charles)

Well this is a dumb one. In some cases we pass a URL string onto libcurl as CURLOPT_URL and then free it before the curl task finishes. In some cases (such as reconnecting after a keepalive socket has expired and closed) curl tries to use this dangling pointer as a URL string, causing the task to fail.

This bug was reported by John Doe.

Change History (6)

comment:1 Changed 12 years ago by charles

  • Component changed from Transmission to libtransmission
  • Owner set to charles
  • Status changed from new to assigned

comment:2 Changed 12 years ago by charles

  • Resolution set to fixed
  • Status changed from assigned to closed

Fixed in trunk for 1.90 by r10152.

Adding backport-1.8x tag. If there is another 1.8x release this fix should be included.

comment:3 Changed 12 years ago by charles

  • Description modified (diff)

comment:4 Changed 12 years ago by charles

  • Version changed from 1.83 to 1.81

comment:5 Changed 12 years ago by charles

  • Description modified (diff)

comment:6 Changed 12 years ago by charles

  • Keywords backport-1.8x added
Note: See TracTickets for help on using tickets.