IntenseFinance/gnucash
3
0
Fork 0
mirror of https://github.com/Gnucash/gnucash.git synced 2025-02-25 18:55:30 -06:00
Code Issues Packages Projects Releases Wiki Activity

Fix potential crash with malformed reports

Browse Source 
If reports contain an opening <object> tag, but omit the closing tag,
the html string is freed and still used some time later.

git-svn-id: svn+ssh://svn.gnucash.org/repo/gnucash/trunk@22544 57a11ea4-9604-0410-9ed3-97b8803252fd
This commit is contained in:
Geert Janssens 2012-11-13 12:32:09 +00:00
parent 255d36f9e3
commit 89b65622e1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/html/gnc-html-webkit.c
View File

@ -383,7 +383,7 @@ handle_embedded_object( GncHtmlWebkit* self, gchar* html_str )
Return the original html string because we can't properly parse it */ Return the original html string because we can't properly parse it */
g_free (classid_str); g_free (classid_str);
g_free (html_str_result); g_free (html_str_result);
return html_str; return g_strdup (html_str);
} }
end_object_tag += strlen( "</object>" ); end_object_tag += strlen( "</object>" );
object_contents = g_strndup( object_tag, (end_object_tag - object_tag) ); object_contents = g_strndup( object_tag, (end_object_tag - object_tag) );