Changeset 4c50c8d in mainline

Timestamp:

2011-10-04T20:44:35Z (13 years ago)

Author:

Jakub Jermar <jakub@…>

Branches:

lfn, master, serial, ticket/834-toolchain-update, topic/msim-upgrade, topic/simplify-dev-export

Children:

cfa1a8a, d6c953e9

Parents:

3d79f5b

Message:

Fix use-after-free in async_hangup().

File:

• uspace/lib/c/generic/async.c (modified) (2 diffs)

uspace/lib/c/generic/async.c

@@ -1847 +1847 @@
         fibril_mutex_lock(&async_sess_mutex);
         
-        int rc = async_hangup_internal(sess->phone);
-        if (rc == EOK)
-                free(sess);
-        
         while (!list_empty(&sess->exch_list)) {
                 exch = (async_exch_t *)
@@ -1861 +1857 @@
                 free(exch);
         }
+
+        int rc = async_hangup_internal(sess->phone);
+        free(sess);
         
         fibril_mutex_unlock(&async_sess_mutex);