[PATCH] Fix Heap-use-after-free in hash_table_destroy

--0000000000003f7a740631119b80
Content-Type: text/plain; charset="UTF-8"

Dear Wget Developers,

This patch fixes a Heap-use-after-free vulnerability in the
hash_table_destroy function.

Vulnerability Details:
Project: wget
Fuzzing Engine: honggfuzz
Fuzz Target: wget_options_fuzzer
Job Type: honggfuzz_asan_wget
Platform: Linux
Crash Type: Heap-use-after-free READ 8
Issue Link: https://issues.oss-fuzz.com/issues/385180607

Description of Changes:
The vulnerability was caused by accessing the hash table (ht) and its cells
after they had been freed. To resolve this issue, the following changes
were made:

Function Affected: hash_table_destroy
Resolution: After freeing ht->cells and ht, they are now set to NULL to
ensure they are not accessed again.By setting ht and its cells to NULL
after freeing them, we prevent any further access to the freed memory, thus
fixing the Heap-use-after-free vulnerability.
Thanks

--0000000000003f7a740631119b80
Content-Type: application/octet-stream; 
	name="0001-Fix-Heap-use-after-free-in-hash_table_destroy.patch"
Content-Disposition: attachment; 
	filename="0001-Fix-Heap-use-after-free-in-hash_table_destroy.patch"
Content-Transfer-Encoding: base64
Content-ID: <f_m8mqx9y40>
X-Attachment-Id: f_m8mqx9y40
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--0000000000003f7a740631119b80--