From: Jon Maloy <jon.ma...@ericsson.com> Date: Mon, 20 Nov 2017 21:43:03 +0100
> When the function tipc_group_filter_msg() finds that a member event > indicates that the member is leaving the group, it first deletes the > member instance, and then purges the message queue being handled > by the call. But the message queue is an aggregated field in the > just deleted item, leading the purge call to access freed memory. > > We fix this by swapping the order of the two actions. > > Signed-off-by: Jon Maloy <jon.ma...@ericsson.com> Applied, thanks Jon. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ tipc-discussion mailing list tipc-discussion@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tipc-discussion