From 5abc2e376c1ba01d3d0c1ec3dad88f135476e5d2 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Thu, 12 Dec 2024 09:06:04 +0100 Subject: [PATCH] docs/_security.html: add BAD_FREE to the list of C mistakes Introduced in CVE-2024-6197 Closes #414 --- docs/_security.html | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/_security.html b/docs/_security.html index a0db9ce879..81b762344b 100644 --- a/docs/_security.html +++ b/docs/_security.html @@ -56,10 +56,11 @@ SUBTITLE(C mistakes)

- The flaws listed as "C mistakes" are vulnerabilities that we deem + Flaws listed as "C mistakes" are vulnerabilities that we deem are likely to not have happened should we have used a memory-safe language rather than C. The C mistakes are divided into the following areas: - OVERFLOW, OVERREAD, DOUBLE_FREE, USE_AFTER_FREE, NULL_MISTAKE and UNINIT. + OVERFLOW, OVERREAD, DOUBLE_FREE, USE_AFTER_FREE, NULL_MISTAKE, UNINIT and + BAD_FREE. SUBTITLE(Retracted security vulnerabilities)