Merge pull request #20 from ethomson/ethomson/use_after_free

Avoid use-after-free in builtin unicode
ethomson · Dec 21, 2023 · 73cd8a3 · 73cd8a3
2 parents 72ba590 + bcd9642
commit 73cd8a3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/unicode_builtin.c b/src/unicode_builtin.c
@@ -372,13 +372,13 @@ static inline bool unicode_builtin_encoding_convert(
 			goto done;
 		}
 
+		out_len = out_start - out;
+
 		if ((new_out = realloc(out, out_size)) == NULL) {
 			ntlm_client_set_errmsg(ntlm, "out of memory");
 			goto done;
 		}
 
-		out_len = out_start - out;
-
 		out = new_out;
 		out_start = new_out + out_len;
 		out_end = out + out_size;