https://bugs.winehq.org/show_bug.cgi?id=36577
Bug ID: 36577 Summary: valgrind shows a use after free in urlmon/tests/url.c Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: urlmon Assignee: wine-bugs@winehq.org Reporter: austinenglish@gmail.com
==23547== Invalid read of size 4 ==23547== at 0x50304F6: Binding_Abort (binding.c:852) ==23547== by 0x78BB53D: abort_window_bindings (urlmon.h:408) ==23547== by 0x78A3C6C: detach_inner_window (htmlwindow.c:124) ==23547== by 0x78A421D: release_outer_window (htmlwindow.c:206) ==23547== by 0x78A45C7: HTMLWindow2_Release (htmlwindow.c:282) ==23547== by 0x7846EDB: CustomDoc_Release (mshtml.h:47873) ==23547== by 0x7834D3F: htmldoc_release (mshtml_private.h:544) ==23547== by 0x7835535: HTMLDocument_Release (htmldoc.c:140) ==23547== by 0x4EC4D3A: test_BindToObject (url.c:3332) ==23547== by 0x4EC8513: func_url (url.c:3895) ==23547== by 0x4ECA166: run_test (test.h:584) ==23547== by 0x4ECA555: main (test.h:654) ==23547== Address 0x49c3818 is 4,432 bytes inside a block of size 8,416 free'd ==23547== at 0x7BC4C72C: notify_free (heap.c:263) ==23547== by 0x7BC51071: RtlFreeHeap (heap.c:1762) ==23547== by 0x65C4013: heap_free (internet.h:136) ==23547== by 0x65C4A4F: WININET_Release (internet.c:277) ==23547== by 0x65CDD91: INTERNET_WorkerThreadFunc (internet.c:3841) ==23547== by 0x7BC90A24: worker_thread_proc (threadpool.c:110) ==23547== by 0x7BC870C7: ??? (signal_i386.c:2571) ==23547== by 0x7BC87110: call_thread_func (signal_i386.c:2630) ==23547== by 0x7BC870A5: ??? (signal_i386.c:2571) ==23547== by 0x7BC8E4EC: start_thread (thread.c:428) ==23547== by 0x421FF92: start_thread (pthread_create.c:309) ==23547== by 0x43247ED: clone (clone.S:129) ==23547==