libpciaccess: Changes to 'master'
Alan Coopersmith
alanc at kemper.freedesktop.org
Thu Apr 16 16:49:20 PDT 2009
src/solx_devfs.c | 12 +++++++-----
1 file changed, 7 insertions(+), 5 deletions(-)
New commits:
commit be748a7b512bf5597e162694a3b1769132938fe1
Author: Alan Coopersmith <alan.coopersmith at sun.com>
Date: Wed Apr 15 10:06:49 2009 -0700
Sun bug 6811468: pci_device_solx_devfs_probe accesses freed memory
di_fini() is being called in pci_device_solx_devfs_probe()
The di_fini (3DEVINFO) man page says "All handles associated with this
snapshot become invalid after the call to di_fini()". But after that,
eight lines down, the subroutine was calling di_prop_lookup_ints with
a handle args.node which was stored from walking the device tree, and
then using the pointers that returned even further down.
Signed-off-by: Alan Coopersmith <alan.coopersmith at sun.com>
More information about the xorg-commit
mailing list