diff options
author | Dave Airlie <airlied@redhat.com> | 2009-06-10 13:33:47 +1000 |
---|---|---|
committer | Dave Airlie <airlied@redhat.com> | 2009-06-24 10:44:11 +1000 |
commit | 07c36e4fdcd93df3d33bdab6cca4780ebc9c1f54 (patch) | |
tree | 10c1d94e9814d95e1b27258c9a263e9df8e3fc1c /Xi/exevents.c | |
parent | 184deb9bc325eb7aa7eb7b7d4f98aa917f0269cb (diff) |
dix/resource: fix use after free in resource code with DRI
LookupClientResourceComplex is used by DRI1 code to find and free a DRI
drawable in a callback, however when the DRI code returns this->value
is now pointing at freed memory. It seemed easiest to store the value
to a temporary and return it afterwards.
Another option might be a new FreeClientResourceComplex or one that
also returns the id, so we can free it using an alternative means.
found using valgrind.
amended along ajax's suggestions
Diffstat (limited to 'Xi/exevents.c')
0 files changed, 0 insertions, 0 deletions