From 32fb5f2d821e5e13038eab7db35c5048ad807ccc Mon Sep 17 00:00:00 2001 From: Dave Airlie Date: Fri, 2 May 2014 13:14:30 +1000 Subject: modesetting: fix use after free. Signed-off-by: Dave Airlie --- src/drmmode_display.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/drmmode_display.c b/src/drmmode_display.c index 28a4abb..c533324 100644 --- a/src/drmmode_display.c +++ b/src/drmmode_display.c @@ -778,11 +778,11 @@ drmmode_output_destroy(xf86OutputPtr output) drmModeFreeProperty(drmmode_output->props[i].mode_prop); free(drmmode_output->props[i].atoms); } + free(drmmode_output->props); for (i = 0; i < drmmode_output->mode_output->count_encoders; i++) { drmModeFreeEncoder(drmmode_output->mode_encoders[i]); - free(drmmode_output->mode_encoders); } - free(drmmode_output->props); + free(drmmode_output->mode_encoders); drmModeFreeConnector(drmmode_output->mode_output); free(drmmode_output); output->driver_private = NULL; -- cgit v1.2.3