From 72171240cc1d3dfdee27ce460e88fca23308bdba Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Sun, 10 Nov 2013 16:39:28 +0100 Subject: [PATCH] buffered-output-stream: Fix some access after free The memory pointed to by a GMemoryOutputStream can be realloc'd https://bugzilla.gnome.org/show_bug.cgi?id=711802 --- gio/tests/buffered-output-stream.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/gio/tests/buffered-output-stream.c b/gio/tests/buffered-output-stream.c index 65dec81..f3aed92 100644 --- a/gio/tests/buffered-output-stream.c +++ b/gio/tests/buffered-output-stream.c @@ -270,6 +270,7 @@ test_truncate(void) g_assert_cmpint (g_memory_output_stream_get_size (base_stream), ==, len); g_assert_cmpint (g_memory_output_stream_get_data_size (base_stream), ==, 4); + stream_data = g_memory_output_stream_get_data (base_stream); g_assert_cmpint (stream_data[0], ==, 'a'); g_assert_cmpint (stream_data[1], ==, 'b'); g_assert_cmpint (stream_data[2], ==, 'c'); @@ -281,6 +282,7 @@ test_truncate(void) g_assert (res); g_assert_cmpint (g_memory_output_stream_get_size (base_stream), ==, 4); g_assert_cmpint (g_memory_output_stream_get_data_size (base_stream), ==, 4); + stream_data = g_memory_output_stream_get_data (base_stream); g_assert_cmpint (stream_data[0], ==, 'a'); g_assert_cmpint (stream_data[1], ==, 'b'); g_assert_cmpint (stream_data[2], ==, 'c'); @@ -292,6 +294,7 @@ test_truncate(void) g_assert (res); g_assert_cmpint (g_memory_output_stream_get_size (base_stream), ==, 6); g_assert_cmpint (g_memory_output_stream_get_data_size (base_stream), ==, 4); + stream_data = g_memory_output_stream_get_data (base_stream); g_assert_cmpint (stream_data[0], ==, 'a'); g_assert_cmpint (stream_data[1], ==, 'b'); g_assert_cmpint (stream_data[2], ==, 'c'); @@ -303,6 +306,7 @@ test_truncate(void) g_assert (res); g_assert_cmpint (g_memory_output_stream_get_size (base_stream), ==, 2); g_assert_cmpint (g_memory_output_stream_get_data_size (base_stream), ==, 2); + stream_data = g_memory_output_stream_get_data (base_stream); g_assert_cmpint (stream_data[0], ==, 'a'); g_assert_cmpint (stream_data[1], ==, 'b'); -- 2.7.4