From: Jon Maloy <jon.ma...@ericsson.com>
Date: Mon, 20 Nov 2017 21:43:03 +0100

> When the function tipc_group_filter_msg() finds that a member event
> indicates that the member is leaving the group, it first deletes the
> member instance, and then purges the message queue being handled
> by the call. But the message queue is an aggregated field in the
> just deleted item, leading the purge call to access freed memory.
> 
> We fix this by swapping the order of the two actions.
> 
> Signed-off-by: Jon Maloy <jon.ma...@ericsson.com>

Applied, thanks Jon.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
tipc-discussion mailing list
tipc-discussion@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tipc-discussion

Reply via email to