diff options
| author | Christophe Fergeau <cfergeau@redhat.com> | 2016-03-30 17:38:13 +0100 |
|---|---|---|
| committer | Frediano Ziglio <fziglio@redhat.com> | 2016-03-31 08:07:52 +0100 |
| commit | fe3d5d542d867a1d4da331035a60403bf7289998 (patch) | |
| tree | 743dc6402a86cce9f04a311574c3a95c583f7864 | |
| parent | 61d41688d4046a2fc1862d508a13f377c7fd3241 (diff) | |
char-device: Avoid use-after-free
Reset pointer after freeing the structure pointing to it.
Acked-by: Jonathon Jongsma <jjongsma@redhat.com>
| -rw-r--r-- | server/char-device.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/server/char-device.c b/server/char-device.c index 6704678c..53bfe823 100644 --- a/server/char-device.c +++ b/server/char-device.c @@ -211,6 +211,7 @@ static void spice_char_device_client_free(SpiceCharDeviceState *dev, if (dev_client->wait_for_tokens_timer) { reds_core_timer_remove(dev->priv->reds, dev_client->wait_for_tokens_timer); + dev_client->wait_for_tokens_timer = NULL; } spice_char_device_client_send_queue_free(dev, dev_client); |