diff options
| author | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2015-05-12 15:26:42 +0100 |
|---|---|---|
| committer | Vsevolod Stakhov <vsevolod@highsecure.ru> | 2015-05-12 15:26:42 +0100 |
| commit | 780bb6dfaefc471f4b8d2100642a2c1af6a2623b (patch) | |
| tree | 08fc77be7b31665e425f5aaef910ebbfcbab8cc2 /src/lua/lua_http.c | |
| parent | 03bcabb80535bb9a3bc29d92c8eb26ed43262a98 (diff) | |
| download | rspamd-780bb6dfaefc471f4b8d2100642a2c1af6a2623b.tar.gz rspamd-780bb6dfaefc471f4b8d2100642a2c1af6a2623b.zip | |
Fix zero-copy mode in lua_http (double free).
Diffstat (limited to 'src/lua/lua_http.c')
| -rw-r--r-- | src/lua/lua_http.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/lua/lua_http.c b/src/lua/lua_http.c index 7e48b7fd6..1baef5ed4 100644 --- a/src/lua/lua_http.c +++ b/src/lua/lua_http.c @@ -410,6 +410,8 @@ lua_http_request (lua_State *L) msg->body = g_string_new (NULL); msg->body->str = (gchar *)t->start; msg->body->len = t->len; + /* It is not safe unless we set len to avoid body_buf to be freed */ + msg->body_buf.len = t->len; } } |