On 04/04/2011 07:54 PM, Tiago Vignatti wrote:
> It will fix two possible cases of use after free in RemoveDevice.
> 
> Signed-off-by: Tiago Vignatti <[email protected]>
> ---
>  dix/devices.c |    1 +
>  1 files changed, 1 insertions(+), 0 deletions(-)
> 
> diff --git a/dix/devices.c b/dix/devices.c
> index 534931c..0288e15 100644
> --- a/dix/devices.c
> +++ b/dix/devices.c
> @@ -941,6 +941,7 @@ CloseDevice(DeviceIntPtr dev)
>      free(dev->config_info);     /* Allocated in xf86ActivateDevice. */
>      dev->config_info = NULL;
>      dixFreeObjectWithPrivates(dev, PRIVATE_DEVICE);
> +    dev = NULL;
>  }
>  
>  /**
OK, but _how_ does it do what you say it does? I'm just seeing a dead
store to a local.

Cheers,

Simon

_______________________________________________
[email protected]: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: http://lists.x.org/mailman/listinfo/xorg-devel

Reply via email to