| Summary: | NULL pointer dereference in SDL_AllocRW() if out of memory. | ||
|---|---|---|---|
| Product: | SDL | Reporter: | Philipp Wiesemann <philipp.wiesemann> |
| Component: | file | Assignee: | Sam Lantinga <slouken> |
| Status: | RESOLVED FIXED | QA Contact: | Sam Lantinga <slouken> |
| Severity: | normal | ||
| Priority: | P2 | ||
| Version: | HG 2.0 | ||
| Hardware: | All | ||
| OS: | All | ||
Fixed, thanks! http://hg.libsdl.org/SDL/rev/65df21723f58 |
There is a NULL pointer dereference in SDL_AllocRW() if the system is out of memory. The "type" field is always written. This may be fixed with an early return. Or an else{} or not writing the field and using slower SDL_calloc(). This fault was recently introduced (http://hg.libsdl.org/SDL/rev/681820ca0e78).