FilesExpand file tree

 main

/

DoubleFree.cpp

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

10 lines (10 loc) · 373 Bytes

 main

/

DoubleFree.cpp

Copy path

Top

File metadata and controls

• Code
• Blame

10 lines (10 loc) · 373 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

int* f() {

int *buff = malloc(SIZE*sizeof(int));

do_stuff(buff);

free(buff);

int *new_buffer = malloc(SIZE*sizeof(int));

free(buff); // BAD: If new_buffer is assigned the same address as buff,

// the memory allocator will free the new buffer memory region,

// leading to use-after-free problems and memory corruption.

return new_buffer;

}