seahorn / sea-dsa

A new context, field, and array-sensitive heap analysis for LLVM bitcode based on DSA.
Other
157 stars 29 forks source link

fix(RemovePtrToInt): Fix use-after-free #149

Closed adrianherrera closed 2 years ago

adrianherrera commented 2 years ago

A use-after-free occurs when a store instruction in StoresToErase is also in the MaybeUnusedInsts set. Remove it from the MaybeUnusedInsts set before erasing it.

caballa commented 2 years ago

Thanks!