diff options
| author | Daniel Golle | 2024-09-27 13:13:52 +0000 |
|---|---|---|
| committer | Daniel Golle | 2026-03-14 00:29:08 +0000 |
| commit | fa594dbf6e135ca081b8342becbf6e11f1004a85 (patch) | |
| tree | 0eea477bd54db8ba49257115aacde16c226dffc4 | |
| parent | 42d3937654508b04da64969f9d764ac2ec411904 (diff) | |
jail: seccomp-oci: fix uninitialized pointer read in error path
The pointer to allocated memory 'filter' has not been assigned to
'prog->filter' when error path errout1 is used. Free 'filter' instead
of 'prog->filter' in that case.
Coverity CID 1520949 Uninitialized pointer read
Coverity CID 1521044 Resource leak
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f2d5031c4b6819007e04566e7daab8019c93be43)
| -rw-r--r-- | jail/seccomp-oci.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/jail/seccomp-oci.c b/jail/seccomp-oci.c index 9ef43d1..c279fc1 100644 --- a/jail/seccomp-oci.c +++ b/jail/seccomp-oci.c @@ -422,7 +422,7 @@ struct sock_fprog *parseOCIlinuxseccomp(struct blob_attr *msg) return prog; errout1: - free(prog->filter); + free(filter); errout2: free(prog); return NULL; |