luaossl icon indicating copy to clipboard operation
luaossl copied to clipboard

Fix use-after-free in error message construction

Open mwild1 opened this issue 1 year ago • 0 comments

Calling ERR_clear_error() releases the buffers that hold the path/filename, so we need to push those to Lua (which will copy them) before they are released.

The problem can be verified with valgrind, or indeed just by running it on my machine which shows random memory contents prefixed to the error message string.

mwild1 avatar Jul 08 '24 10:07 mwild1