[Bug 20896] Use-after-free in DdeClientTransaction in user32 dde tests

wine-bugs at winehq.org wine-bugs at winehq.org
Sat Oct 15 16:42:43 CDT 2011


http://bugs.winehq.org/show_bug.cgi?id=20896

--- Comment #3 from Dan Kegel <dank at kegel.com> 2011-10-15 16:42:43 CDT ---
Still present.  Log seems more informative now:

Invalid read of size 2 
   at GlobalFree (heap.c:758)
   by WDML_FreeTransaction (dde_misc.c:2444)
   by DdeClientTransaction (dde_client.c:1228)
   by func_dde (dde.c:406)
   by run_test (test.h:556)
   by main (test.h:624)
 Address 0x7f033e68 is 0 bytes inside a block of size 8 free'd
   at notify_free (heap.c:262)
   by RtlFreeHeap (heap.c:1748)
   by HeapFree (heap.c:272)
   by GlobalFree (heap.c:770)
   by WDML_HandleReply (dde_client.c:781)
   by WDML_SyncWaitTransactionReply (dde_client.c:1053)
   by WDML_ClientHandle (dde_client.c:1126)
   by DdeClientTransaction (dde_client.c:1224)
   by func_dde (dde.c:406)
   by run_test (test.h:556)
   by main (test.h:624)

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the wine-bugs mailing list