Double Free not found during Taint Analysis
flammi opened this issue · 3 comments
flammi commented
- I have searched open and closed issues for duplicates
- I made sure that I am not using an old project version (DO: pull Phasar, update git submodules, rebuild the project and check if the bug is still there)
- I talked to Fabian and he confirmed this is a bug
Bug description
We are doing a taint analysis to find the double free in the following C program:
#include<stdlib.h>
int blub(void *ptr) {
free(ptr);
return 0;
}
int main(int argc, char** argv) {
void* bla = malloc(10);
blub(bla);
free(bla);
return 0;
}
The source code of our analysis is attached (unfortunately as .txt file as .cpp is not allowed by GitHub -- sorry).
Context (Environment)
Operating System:
- Linux
- Windows
- macOS
Build Type:
- cmake
- custom build
fabianbs96 commented
Hi @flammi, thanks for pointing that out. I could reproduce your issue -- it is a bug that probably has to do with return-POIs. We will look into it.
fabianbs96 commented