From 9019d6fc527882b8e09ca210e997b43a7b77c70f Mon Sep 17 00:00:00 2001
From: Esa Peuha <esa.peuha@gmail.com>
Date: Sat, 27 Feb 2016 09:59:13 +0200
Subject: Fix use-after-free in libps.

* libps/fmt.c (_fmt_create): Free new_fmt->src before new_fmt
if reallocating fields fails.
---
 libps/fmt.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'libps/fmt.c')

diff --git a/libps/fmt.c b/libps/fmt.c
index 580b097e..f9142123 100644
--- a/libps/fmt.c
+++ b/libps/fmt.c
@@ -80,8 +80,8 @@ _fmt_create (char *src, int posix, struct ps_fmt_specs *fmt_specs,
 
 	  if (fields == NULL)
 	    {
-	      FREE (new_fmt);
 	      FREE (new_fmt->src);
+	      FREE (new_fmt);
 	      return ENOMEM;
 	    }
 
-- 
cgit v1.2.3