From f0babc6f959e08d77a9f44a5ac05e7a8b0ce2728 Mon Sep 17 00:00:00 2001 From: Cory McWilliams Date: Fri, 12 Dec 2025 18:24:23 -0500 Subject: [PATCH] core: Fix a recently introduced use after free. --- src/httpd.app.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/httpd.app.c b/src/httpd.app.c index 84d42ebe..c58a0320 100644 --- a/src/httpd.app.c +++ b/src/httpd.app.c @@ -367,10 +367,10 @@ static JSValue _httpd_app_on_process_start(JSContext* context, JSValueConst this JSValue process_app = JS_GetPropertyStr(context, app->process, "app"); JSValue on_output = JS_NewCFunctionData(context, _httpd_app_on_output, 1, 0, 1, func_data); JS_SetPropertyStr(context, process_app, "_on_output", on_output); - JS_FreeValue(context, process_app); JSValue send = JS_GetPropertyStr(context, process_app, "send"); JSValue result = JS_Call(context, send, process_app, 0, NULL); + JS_FreeValue(context, process_app); JS_FreeValue(context, send); tf_util_report_error(context, result); JS_FreeValue(context, result);