Fix #22293 - uaf in bin.avr file

radareorg · Oct 5, 2023 · bf1a3b2 · bf1a3b2
1 parent b86204a
commit bf1a3b2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/libr/bin/p/bin_avr.c b/libr/bin/p/bin_avr.c
@@ -86,8 +86,8 @@ static bool load(RBinFile *bf, RBuffer *buf, ut64 loadaddr) {
 
 static void destroy(RBinFile *bf) {
 	AvrPriv *ap = (AvrPriv*)(bf->bo->bin_obj);
-	r_buf_free (ap->b);
-	R_FREE (bf->bo->bin_obj);
+	// r_buf_free (ap->b); // this is freed by RBinFile.free()
+	free (ap);
 }
 
 static RBinInfo* info(RBinFile *bf) {