anastasis

commit 08948f17ac188f802287e0cf24c969725fa9bf77
parent 114670f17b97992e3e46fae3f417f39d0cc05549
Author: Christian Grothoff <christian@grothoff.org>
Date:   Wed, 29 Jul 2026 13:06:35 +0200

do not free encrypted_truth twice on idempotent truth re-upload

Diffstat:
M
src/backend/anastasis-httpd_truth-upload.c
 | 
4
+++-

1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/src/backend/anastasis-httpd_truth-upload.c b/src/backend/anastasis-httpd_truth-upload.c
@@ -762,7 +762,9 @@ AH_handler_truth_post (
                  (0 == memcmp (xtruth,
                                encrypted_truth,
                                xtruth_size)) );
-          GNUNET_free (encrypted_truth);
+          /* NOTE: do NOT free encrypted_truth here; it is owned by `spec`
+             and released by GNUNET_JSON_parse_free (spec) below.  Freeing it
+             here caused a double free on the idempotent fall-through. */
           GNUNET_free (xtruth_mime);
           GNUNET_free (xmethod);
         }