Fix: Use after free #542

New issue

Closed

opened 2023-05-09 15:20:43 -05:00 by Youw · 0 comments

Youw commented

2023-05-09 15:20:43 -05:00

(Migrated from github.com)

Found as part of: #63

if (res < 0) {
    	4. freed_arg: hid_close frees dev. [[show details](https://scan5.scan.coverity.com/eventId=53211934-4&modelId=53211934-0&fileInstanceId=239595692&filePath=%2Flinux%2Fhid.c&fileStart=1150&fileEnd=1163)]
1009                        hid_close(dev);
    	
CID 1529209 (#1 of 1): Use after free (USE_AFTER_FREE)
5. deref_arg: Calling register_device_error_format dereferences freed pointer dev. [[show details](https://scan5.scan.coverity.com/eventId=53211934-8&modelId=53211934-1&fileInstanceId=239595692&filePath=%2Flinux%2Fhid.c&fileStart=175&fileEnd=181)]
1010                        register_device_error_format(dev, "ioctl(GRDESCSIZE) error for '%s', not a HIDRAW device?: %s", path, strerror(errno));
1011                        return NULL;
1012                }

Found as part of: #63 ``` if (res < 0) { 4. freed_arg: hid_close frees dev. [[show details](https://scan5.scan.coverity.com/eventId=53211934-4&modelId=53211934-0&fileInstanceId=239595692&filePath=%2Flinux%2Fhid.c&fileStart=1150&fileEnd=1163)] 1009 hid_close(dev); CID 1529209 (#1 of 1): Use after free (USE_AFTER_FREE) 5. deref_arg: Calling register_device_error_format dereferences freed pointer dev. [[show details](https://scan5.scan.coverity.com/eventId=53211934-8&modelId=53211934-1&fileInstanceId=239595692&filePath=%2Flinux%2Fhid.c&fileStart=175&fileEnd=181)] 1010 register_device_error_format(dev, "ioctl(GRDESCSIZE) error for '%s', not a HIDRAW device?: %s", path, strerror(errno)); 1011 return NULL; 1012 } ```