Changeset 375e501 in mainline

Timestamp:

2012-06-13T21:31:34Z (12 years ago)

Author:

Jiri Svoboda <jiri@…>

Branches:

lfn, master, serial, ticket/834-toolchain-update, topic/msim-upgrade, topic/simplify-dev-export

Children:

3f57fb7

Parents:

2902e1bb

Message:

Fix async_forget(). The reply to a forgotten message was being written, but the destination buffer could have been already freed, causing memory corruption.

File:

• uspace/lib/c/generic/async.c (modified) (1 diff)

uspace/lib/c/generic/async.c

@@ -1388 +1388 @@
 
         futex_down(&async_futex);
-        if (msg->done)
+        if (msg->done) {
                 amsg_destroy(msg);
-        else 
+        } else {
+                msg->dataptr = NULL;
                 msg->forget = true;
+        }
         futex_up(&async_futex);
 }