[PATCH 3/5] dix: set pointer to NULL after freeing at CloseDevice
Tiago Vignatti
tiago.vignatti at nokia.com
Mon Apr 4 10:54:33 PDT 2011
It will fix two possible cases of use after free in RemoveDevice.
Signed-off-by: Tiago Vignatti <tiago.vignatti at nokia.com>
---
dix/devices.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/dix/devices.c b/dix/devices.c
index 534931c..0288e15 100644
--- a/dix/devices.c
+++ b/dix/devices.c
@@ -941,6 +941,7 @@ CloseDevice(DeviceIntPtr dev)
free(dev->config_info); /* Allocated in xf86ActivateDevice. */
dev->config_info = NULL;
dixFreeObjectWithPrivates(dev, PRIVATE_DEVICE);
+ dev = NULL;
}
/**
--
1.7.0.4
More information about the xorg-devel
mailing list