Snort 2.8.5.2 bug

[Fangtu Qiu <qiu () jhu edu>]

There is following code in function addRtnToOtn:

     //add policyId
     if (otn->proto_nodes[policyId])
     {
         DestroyRuleTreeNode(rtn);
     }

     otn->proto_nodes[policyId] = rtn;


It is reusing already freed "rtn". Instead the code should be:

     //add policyId
     if (otn->proto_nodes[policyId])
     {
         DestroyRuleTreeNode(otn->proto_nodes[policyId]);
     }

     otn->proto_nodes[policyId] = rtn;

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel