Project

General

Profile

Actions

Bug #5478

closed

Wt4 Auth LostPasswordWidget use after free

Added by Bruce Toll over 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Roel Standaert
Target version:
-
Start date:
01/04/2017
Due date:
% Done:

0%

Estimated time:

Description

The preview version of Wt4, github 3.3.6-19-gd0b41786, seems to have a use after free error that is triggered by clicking "Ok" on the "Lost password" WMessageBox (the one that appears with the confirmation message: "An email has been sent. Follow the instructions to set a new password.").

This issue does not always result in a segfault. For instance, on my development system, one app segfaults consistently, while the hangman example does not. However, with valgrind, the issue can be observed in both cases.

A file with the first error reported by valgrind is attached (NOTE: executable path shortened, leading PID removed).

Also attached, for your review, is a patch that seemed to help in limited testing. It's mostly intended for testing/illustration. There are probably better solutions.


Files

Actions #1

Updated by Roel Standaert over 7 years ago

  • Status changed from New to Implemented @Emweb
Actions #2

Updated by Roel Standaert over 7 years ago

  • Assignee set to Roel Standaert
Actions #3

Updated by Roel Standaert over 7 years ago

  • Status changed from Implemented @Emweb to Resolved
Actions #4

Updated by Roel Standaert over 6 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF