[Bug 28746] New: use-after-free in acmDriverClose?

http://bugs.winehq.org/show_bug.cgi?id=28746

             Bug #: 28746
           Summary: use-after-free in acmDriverClose?
           Product: Wine
           Version: 1.3.30
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: msacm32
        AssignedTo: wine-bugs(a)winehq.org
        ReportedBy: dank(a)kegel.com
    Classification: Unclassified


valgrind complains:

Invalid read of size 4
   at MSACM_GetObj (internal.c:821)
   by MSACM_GetDriver (internal.c:839)
   by acmDriverClose (driver.c:195)
   by DriverEnumProc (msacm.c:374)
   by acmDriverEnum (driver.c:345)
   by func_msacm (msacm.c:485)
   by run_test (test.h:556)
   by main (test.h:624)
 Address 0x7f230a08 is 0 bytes inside a block of size 20 free'd
   at notify_free (heap.c:262)
   by RtlFreeHeap (heap.c:1748)
   by acmDriverClose (driver.c:218)
   by DriverEnumProc (msacm.c:368)
   by acmDriverEnum (driver.c:345)
   by func_msacm (msacm.c:485)
   by run_test (test.h:556)
   by main (test.h:624)

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.