Use-after-free from Martin Brandenburg.

nicm · Jan 4, 2017 · 71a3ff1 · 71a3ff1
1 parent 2031ca5
commit 71a3ff1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/fetch-mbox.c b/fetch-mbox.c
@@ -182,8 +182,8 @@ fetch_mbox_save(struct account *a, struct fetch_mbox_mbox *fmbox)
 			goto error;
 		}
 
-		fetch_mbox_free(this);
 		TAILQ_REMOVE(&data->kept, this, entry);
+		fetch_mbox_free(this);
 	}
 
 	if (fsync(fd) != 0)