Test case 153699

Description

This test case implements a heap allocated buffer that erroneously gets double free()'d causing a segfault. The test case takes an input string and copies it into a heap allocated buffer. It then checks to see if the first character is an 'a' or greater and if so, calls a function that finishes by free()ing the buffer. The test case then finishes execution and free()s the buffer, causing a double free if the first character was an 'a' or greater.
Metadata
- Base program: Subversion
- Source Taint: FILE_CONTENTS
- Data Type: STRUCT
- Data Flow: ADDRESS_AS_CONSTANT
- Control Flow: UNCONDITIONAL_JUMP