[New-bugs-announce] [issue16215] Possible double memory free in str.replace

[Serhiy Storchaka]

New submission from Serhiy Storchaka:

In the function replace() in the file Objects/unicodeobject.c possible double free memory pointed by buf1. release1 indicates if memory was allocated and deallocation needed. However there are places where memory temporary deallocated but flag was not cleared.

----------
components: Interpreter Core
files: dbl_mem_free.patch
keywords: 3.3regression, patch
messages: 172790
nosy: serhiy.storchaka
priority: normal
severity: normal
status: open
title: Possible double memory free in str.replace
versions: Python 3.3, Python 3.4
Added file: http://bugs.python.org/file27547/dbl_mem_free.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue16215>
_______________________________________