mirrors/bun.sh
1
0
Fork 0
mirror of https://github.com/oven-sh/bun synced 2026-02-11 03:18:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

[bun.js] Fix use-after-free in Bun.write

Browse Source
This commit is contained in:
Jarred Sumner
2022-04-01 19:53:37 -07:00
parent 7a6b6639bc
commit c7727b136b
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/javascript/jsc/webcore/response.zig
View File

@@ -1963,7 +1963,6 @@ pub const Blob = struct {
file_offset: u64,
) AsyncIO.WriteError!SizeType {
var aio = &AsyncIO.global;
this.wrote = 0;
aio.write(
*WriteFile,
this,
@@ -2006,15 +2005,16 @@ pub const Blob = struct {
return;
}
const wrote = this.wrote;
bun.default_allocator.destroy(this);
cb(cb_ctx, .{ .result = @truncate(SizeType, this.wrote) });
cb(cb_ctx, .{ .result = @truncate(SizeType, wrote) });
}
pub fn run(this: *WriteFile, task: *WriteFileTask) void {
this.runAsyncFrame = async this.runAsync(task);
}
pub fn onWrite(this: *WriteFile, _: *HTTPClient.NetworkThread.Completion, result: AsyncIO.WriteError!usize) void {
this.wrote = @truncate(SizeType, result catch |err| {
this.wrote += @truncate(SizeType, result catch |err| {
this.errno = err;
this.wrote = 0;
resume this.write_frame;