| commit | 06bc090d350bca5f6b3dfd99ea54c71c0db84ab2 | [log] [tgz] |
|---|---|---|
| author | Alexander Borisov <alexander.borisov@nginx.com> | Mon Nov 01 18:32:48 2021 +0300 |
| committer | Alexander Borisov <alexander.borisov@nginx.com> | Mon Nov 01 18:32:48 2021 +0300 |
| tree | a173207c7a65d905f3f2dae5a7e2962d3a3b6f5a | |
| parent | 58faa28dc9ad6ff0742b0ea862a21c67d4e67775 [diff] |
Fixed heap-use-after-free in await frame. The bug was introduced in 92d10cd761e2 (0.7.0).
diff --git a/src/njs_async.c b/src/njs_async.c index b5f6c3a..6a93cfd 100644 --- a/src/njs_async.c +++ b/src/njs_async.c
@@ -72,6 +72,8 @@ } async = ctx->await; + async->previous = vm->top_frame; + function = async->function; cur_local = vm->levels[NJS_LEVEL_LOCAL];