From: Tom Peters (thopeter) <thopeter@cisco.com>
Date: Wed, 18 May 2022 19:42:05 +0000 (+0000)
Subject: Pull request #3429: BUG #750965: Double free while processing mime
X-Git-Tag: 3.1.30.0~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f9be1bdc89fcc02c07966d878cbeac898c3de07f;p=thirdparty%2Fsnort3.git

Pull request #3429: BUG #750965: Double free while processing mime

Merge in SNORT/snort3 from ~MDAGON/snort3:mime_fix to master

Squashed commit of the following:

commit cd063a4521c381e26ccbd5e7bf958889ea1bba40
Author: Maya Dagon <mdagon@cisco.com>
Date:   Tue May 17 17:10:01 2022 -0400

    mime: set partial_header to null after deletion
---

diff --git a/src/mime/file_mime_process.cc b/src/mime/file_mime_process.cc
index fa1bc609b..8cc555c30 100644
--- a/src/mime/file_mime_process.cc
+++ b/src/mime/file_mime_process.cc
@@ -634,6 +634,8 @@ void MimeSession::reset_part_state()
     state_flags = 0;
     filename_state = CONT_DISP_FILENAME_PARAM_NAME;
     delete[] partial_header;
+    partial_header = nullptr;
+    partial_header_len = 0;
     if (decode_state)
     {
         decode_state->clear_decode_state();