Page MenuHome GnuPG

Use-after-free in t-edit-sign test
Closed, ResolvedPublic

Description

The new t-edit-sign test in gpgme 1.16.0 crashes on Linux ia32 with GCC 11.1.0 - the "signed_uid" pointer has a garbage value.

I think "signed_uid = key->uids;" on line 171 of t-edit-sign.c should be "signed_uid = signed_key->uids;", as key has already been freed at that point?

Details

Version
1.16.0

Revisions and Commits