Hi Gregor, Samuel reported in priv that the issues he had with user after free were solved by the patchsets merged at 1.12 and 1.16 stable branches. Could you please generate a new staging release for them? Thanks! Mauro Em Sun, 17 Mar 2019 06:52:42 -0300 Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> escreveu: > Em Fri, 15 Mar 2019 22:34:25 +0000 > Sean Young <sean@xxxxxxxx> escreveu: > > > Hi, > > > > On Tue, Mar 12, 2019 at 04:07:23PM +0100, Gregor Jasny wrote: > > > Hello Mauro, > > > > > > below you find a bug report about an use-after-free in dvbv5-zap. > > > > > > On 12.03.19 13:37, CHEMLA Samuel wrote: > > > > please find a bug report that seems to concern ARMHF builds of dvbv5-zap > > > > (dvb-tool package) : https://bugs.launchpad.net/raspbian/+bug/1819650 > > > > I filed it against raspbian because I thought it was a raspbian problem, > > > > but don't think they re-build their own package, but use debian ones > > > > instead... > > > > > > > So I can reproduce the issue with v4l-utils 1.12.3 but not with current > > v4l-utils (or dvbv5-zap). It looks exactly like the issue fixed in > > commit 6e21f6f34c1d7c3a7a059062e1ddd9705c984e2c (but I did not cherry-pick > > and test that on top of 1.12.3 to test that theory). > > I added it to stable/1.12 and another patch fixing the initialization of > the parameters struct, with Samuel reported to fix the issue upstream > (He pinged me in priv too, and I'm helping him to track it). > > Samuel, > > Could you please check if the 1.12 stable branch is OK now? > > Regards, > Mauro > Thanks, > Mauro Thanks, Mauro
