Bug 9153 - libX11 (with XCB backend) accesses freed memory
Summary: libX11 (with XCB backend) accesses freed memory
Status: RESOLVED FIXED
Alias: None
Product: xorg
Classification: Unclassified
Component: Lib/Xlib (show other bugs)
Version: git
Hardware: All All
: high normal
Assignee: Xorg Project Team
QA Contact:
URL:
Whiteboard:
Keywords: patch
Depends on:
Blocks:
 
Reported: 2006-11-25 04:17 UTC by Tilman Sauerbeck
Modified: 2006-11-25 05:32 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments
Patch (1.01 KB, patch)
2006-11-25 04:18 UTC, Tilman Sauerbeck
no flags Details | Splinter Review

Description Tilman Sauerbeck 2006-11-25 04:17:21 UTC
In src/xcb_io.c, _XReply() may free(current), but current is later accessed
unconditionally.

I'm attaching a patch which seems to work, but I'm not sure whether it's correct.
Comment 1 Tilman Sauerbeck 2006-11-25 04:18:22 UTC
Created attachment 7896 [details] [review]
Patch
Comment 2 Jamey Sharp 2006-11-25 05:32:04 UTC
Good catch. Your patch seems fine to me, so I've pushed it. Thanks for the report!


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.