summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorandreas_kupries <akupries@shaw.ca>2001-08-06 22:43:13 (GMT)
committerandreas_kupries <akupries@shaw.ca>2001-08-06 22:43:13 (GMT)
commit55aa581b09f7ec9a1ea9321975fd0a4c074c4bbd (patch)
tree8580445c28f69c83ec50f6b8bbd543565263bfd2
parent02b7fc064fe51c7ec01f8977ae28ccfb38e84e62 (diff)
downloadtcl-55aa581b09f7ec9a1ea9321975fd0a4c074c4bbd.zip
tcl-55aa581b09f7ec9a1ea9321975fd0a4c074c4bbd.tar.gz
tcl-55aa581b09f7ec9a1ea9321975fd0a4c074c4bbd.tar.bz2
Extended description of fix 442665.
-rw-r--r--ChangeLog8
1 files changed, 6 insertions, 2 deletions
diff --git a/ChangeLog b/ChangeLog
index 47be923..8def608 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,8 +1,12 @@
2001-08-06 Andreas Kupries <andreas_kupries@users.sourceforge.net>
* generic/tclIOCmd.c (Tcl_GetsObjCmd): Applied patch from SF item
- [442665] to fix the bug reported by it.
-
+ [442665] to fix the bug reported by it. The function can corrupt
+ a freed object if it is called with objc == 3. This is because
+ it retrieves resultPtr and does not increment its reference
+ count, but then calls Tcl_ObjSetVar2, which causes the retrieved
+ resultPtr object to be released.
+
2001-08-06 Don Porter <dgp@users.sourceforge.net>
* doc/tclsh.1: Added note that the tclsh program is frequently