dcavalca / rpms / util-linux

Forked from rpms/util-linux 2 years ago
Clone
dbeef3
From c269e116ea4d9e96a5f5801aecf1f624199fa6ec Mon Sep 17 00:00:00 2001
dbeef3
From: Karel Zak <kzak@redhat.com>
dbeef3
Date: Tue, 7 Jun 2022 09:46:54 +0200
dbeef3
Subject: lslogins: fix free(): invalid pointer
dbeef3
dbeef3
Upstream: http://github.com/util-linux/util-linux/commit/890d4d3f236e2d28db35ea9bc9dc3e5e35db975c
dbeef3
Addresses: https://bugzilla.redhat.com/show_bug.cgi?id=2094216
dbeef3
Signed-off-by: Karel Zak <kzak@redhat.com>
dbeef3
---
dbeef3
 login-utils/lslogins.c | 5 ++++-
dbeef3
 1 file changed, 4 insertions(+), 1 deletion(-)
dbeef3
dbeef3
diff --git a/login-utils/lslogins.c b/login-utils/lslogins.c
dbeef3
index 1332a9925..ff4386d1b 100644
dbeef3
--- a/login-utils/lslogins.c
dbeef3
+++ b/login-utils/lslogins.c
dbeef3
@@ -488,7 +488,7 @@ static int parse_utmpx(const char *path, size_t *nrecords, struct utmpx **record
dbeef3
 
dbeef3
 	/* optimize allocation according to file size, the realloc() below is
dbeef3
 	 * just fallback only */
dbeef3
-	if (stat(path, &st) == 0 && (size_t) st.st_size > sizeof(struct utmpx)) {
dbeef3
+	if (stat(path, &st) == 0 && (size_t) st.st_size >= sizeof(struct utmpx)) {
dbeef3
 		imax = st.st_size / sizeof(struct utmpx);
dbeef3
 		ary = xmalloc(imax * sizeof(struct utmpx));
dbeef3
 	}
dbeef3
@@ -1007,6 +1007,9 @@ static void free_ctl(struct lslogins_control *ctl)
dbeef3
 {
dbeef3
 	size_t n = 0;
dbeef3
 
dbeef3
+	if (!ctl)
dbeef3
+		return;
dbeef3
+
dbeef3
 	free(ctl->wtmp);
dbeef3
 	free(ctl->btmp);
dbeef3
 
dbeef3
-- 
dbeef3
2.36.1
dbeef3