Henning Meier-Geinitz <[email protected]> wrote:

Hi,

> Now again in the main part of saned:
>
>     sane_cancel (handle[h].handle);
>
> That's called with h = -1. Either that causes a segfault or the call
> to sane_cancle of the gt68xx backend with some random handle causes
> the segfault.

It segfaults right away when the pointer is dereferenced, probably
early in sane_cancel().

> I guess saned should check for -1 here before calling sane_cancel.

Definitely. Thanks for tracking it down, I was going to do just that
later in the afternoon.

JB.

-- 
Julien BLACHE                                   <http://www.jblache.org> 
<[email protected]>                                  GPG KeyID 0xF5D65169

Reply via email to