Skip to content

Commit f4fb271

Browse files
ndosschecharmitro
authored andcommitted
Fix crash in firebird statement dtor
If both the driver object and statement end up in the GC buffer and are freed by the GC, then the destruction order is not deterministic and it is possible that the driver object is freed before the statement. In that case, accessing S->H will cause a UAF. As the resources are already released we simply skip the destruction if the driver object is already destroyed.
1 parent b061567 commit f4fb271

File tree

1 file changed

+99
-180
lines changed

1 file changed

+99
-180
lines changed

0 commit comments

Comments
 (0)