shithub: riscv

Download patch

ref: cd5bafe7cbb4736ed53745e288bac44020902f13
parent: 87a6e1873b3ebd90a6cc075b3a833cca5b675f1a
author: cinap_lenrek <cinap_lenrek@felloff.net>
date: Fri Feb 17 06:41:59 EST 2023

devproc: Fix a double-free reading note file (thanks Josiah Frentsos)

Oversight, was using free() instead of freenote(),
which handles the refcounting for gorup notes.

--- a/sys/src/9/port/devproc.c
+++ b/sys/src/9/port/devproc.c
@@ -1127,7 +1127,7 @@
 				n = i;
 			memmove(va, p->note[0]->msg, n-1);
 			((char*)va)[n-1] = '\0';
-			free(p->note[0]);
+			freenote(p->note[0]);
 			if(--p->nnote == 0)
 				p->notepending = 0;
 			else