Re: [PATCH] Fix Heap-use-after-free in hash_table_destroy

Tim Rühsen <[email protected]> Sun, 27 Apr 2025 19:31:03 +0200
Newsgroups gmane.comp.web.wget.general
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------j60gCw0MyVbaD6QREsNefAwu
Content-Type: multipart/mixed; boundary="------------i2eF3lD87OL0BZx0wzcodhDF";
 protected-headers="v1"
From: =?UTF-8?Q?Tim_R=C3=BChsen?= <[email protected]>
To: shivam tiwari <[email protected]>, [email protected]
Message-ID: <[email protected]>
Subject: Re: [PATCH] Fix Heap-use-after-free in hash_table_destroy
References: <CALz0HOpRn8z0hUVRLU36xdmrxf7yfJ3XMOOSU0YXExZUjWsdWA@mail.gmail.com>
In-Reply-To: <CALz0HOpRn8z0hUVRLU36xdmrxf7yfJ3XMOOSU0YXExZUjWsdWA@mail.gmail.com>

--------------i2eF3lD87OL0BZx0wzcodhDF
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------i2eF3lD87OL0BZx0wzcodhDF--

--------------j60gCw0MyVbaD6QREsNefAwu
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=T0ca
-----END PGP SIGNATURE-----

--------------j60gCw0MyVbaD6QREsNefAwu--