Fix potential fault at createDoubleObject

Resolves redis#963. Add additional check to `hi_malloc` for `r->str` when len+1 equals to 0.
afcidk · Jun 14, 2021 · 5413631 · 5413631
1 parent b6f86f3
commit 5413631
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/hiredis.c b/hiredis.c
@@ -231,6 +231,11 @@ static void *createDoubleObject(const redisReadTask *task, double value, char *s
         freeReplyObject(r);
         return NULL;
     }
+    else if (len+1 == 0) {
+        hi_free(r->str);
+        freeReplyObject(r);
+        return NULL;
+    }
 
     /* The double reply also has the original protocol string representing a
      * double as a null terminated string. This way the caller does not need