diff options
| author | Daniel Golle | 2024-09-27 13:13:52 +0000 |
|---|---|---|
| committer | Daniel Golle | 2025-01-06 23:46:55 +0000 |
| commit | f2d5031c4b6819007e04566e7daab8019c93be43 (patch) | |
| tree | 0eea477bd54db8ba49257115aacde16c226dffc4 | |
| parent | 42d3937654508b04da64969f9d764ac2ec411904 (diff) | |
| download | procd-f2d5031c4b6819007e04566e7daab8019c93be43.tar.gz | |
jail: seccomp-oci: fix uninitialized pointer read in error path
The pointer to allocated memory 'filter' has not been assigned to
'prog->filter' when error path errout1 is used. Free 'filter' instead
of 'prog->filter' in that case.
Coverity CID 1520949 Uninitialized pointer read
Coverity CID 1521044 Resource leak
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| -rw-r--r-- | jail/seccomp-oci.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/jail/seccomp-oci.c b/jail/seccomp-oci.c index 9ef43d1..c279fc1 100644 --- a/jail/seccomp-oci.c +++ b/jail/seccomp-oci.c @@ -422,7 +422,7 @@ struct sock_fprog *parseOCIlinuxseccomp(struct blob_attr *msg) return prog; errout1: - free(prog->filter); + free(filter); errout2: free(prog); return NULL; |