Commit bb6e8b4
committed
Update wire to fix a potential use-after-free
MsgTx decoding could result in caller-provided scripts being incorrectly added
to the script freelist when decoding errors. These scripts will be reused
during later deserializations, overwriting the existing scripts caller
previously provided. This is, in other words, the same as a use-after-free
violation in languages with manual memory management.
wire v1.7.4 provides a mitigation for this issue, as well as other performance
improvements and addrv2 message support that dcrwallet will eventually benefit
from.1 parent 1d35454 commit bb6e8b4
2 files changed
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
28 | | - | |
| 28 | + | |
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
58 | 58 | | |
59 | 59 | | |
60 | 60 | | |
61 | | - | |
62 | | - | |
| 61 | + | |
| 62 | + | |
63 | 63 | | |
64 | 64 | | |
65 | 65 | | |
| |||
0 commit comments