[Bug 36577] New: valgrind shows a use after free in urlmon/tests/url.c

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=36577

            Bug ID: 36577
           Summary: valgrind shows a use after free in urlmon/tests/url.c
           Product: Wine
           Version: 1.7.19
          Hardware: x86
                OS: Linux
            Status: NEW
          Keywords: download, source, testcase
          Severity: normal
          Priority: P2
         Component: urlmon
          Assignee: wine-bugs at winehq.org
          Reporter: austinenglish at gmail.com

==23547== Invalid read of size 4
==23547==    at 0x50304F6: Binding_Abort (binding.c:852)
==23547==    by 0x78BB53D: abort_window_bindings (urlmon.h:408)
==23547==    by 0x78A3C6C: detach_inner_window (htmlwindow.c:124)
==23547==    by 0x78A421D: release_outer_window (htmlwindow.c:206)
==23547==    by 0x78A45C7: HTMLWindow2_Release (htmlwindow.c:282)
==23547==    by 0x7846EDB: CustomDoc_Release (mshtml.h:47873)
==23547==    by 0x7834D3F: htmldoc_release (mshtml_private.h:544)
==23547==    by 0x7835535: HTMLDocument_Release (htmldoc.c:140)
==23547==    by 0x4EC4D3A: test_BindToObject (url.c:3332)
==23547==    by 0x4EC8513: func_url (url.c:3895)
==23547==    by 0x4ECA166: run_test (test.h:584)
==23547==    by 0x4ECA555: main (test.h:654)
==23547==  Address 0x49c3818 is 4,432 bytes inside a block of size 8,416 free'd
==23547==    at 0x7BC4C72C: notify_free (heap.c:263)
==23547==    by 0x7BC51071: RtlFreeHeap (heap.c:1762)
==23547==    by 0x65C4013: heap_free (internet.h:136)
==23547==    by 0x65C4A4F: WININET_Release (internet.c:277)
==23547==    by 0x65CDD91: INTERNET_WorkerThreadFunc (internet.c:3841)
==23547==    by 0x7BC90A24: worker_thread_proc (threadpool.c:110)
==23547==    by 0x7BC870C7: ??? (signal_i386.c:2571)
==23547==    by 0x7BC87110: call_thread_func (signal_i386.c:2630)
==23547==    by 0x7BC870A5: ??? (signal_i386.c:2571)
==23547==    by 0x7BC8E4EC: start_thread (thread.c:428)
==23547==    by 0x421FF92: start_thread (pthread_create.c:309)
==23547==    by 0x43247ED: clone (clone.S:129)
==23547==

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.