Changeset 4c50c8d in mainline


Ignore:
Timestamp:
2011-10-04T20:44:35Z (12 years ago)
Author:
Jakub Jermar <jakub@…>
Branches:
lfn, master, serial, ticket/834-toolchain-update, topic/msim-upgrade, topic/simplify-dev-export
Children:
cfa1a8a, d6c953e9
Parents:
3d79f5b
Message:

Fix use-after-free in async_hangup().

File:
1 edited

Legend:

Unmodified
Added
Removed
  • uspace/lib/c/generic/async.c

    r3d79f5b r4c50c8d  
    18471847        fibril_mutex_lock(&async_sess_mutex);
    18481848       
    1849         int rc = async_hangup_internal(sess->phone);
    1850         if (rc == EOK)
    1851                 free(sess);
    1852        
    18531849        while (!list_empty(&sess->exch_list)) {
    18541850                exch = (async_exch_t *)
     
    18611857                free(exch);
    18621858        }
     1859
     1860        int rc = async_hangup_internal(sess->phone);
     1861        free(sess);
    18631862       
    18641863        fibril_mutex_unlock(&async_sess_mutex);
Note: See TracChangeset for help on using the changeset viewer.