On 07/27/2013 02:08 AM, Rob Bradford wrote:
On 27 July 2013 00:21, Bill Spitzak <[email protected]> wrote:
+               device = output->device;
                 fbdev_output_destroy(base);


Are you sure this does not free the memory that is now at *device?

Maybe I missed something - can you point me at the code which makes
you think it does? My reading of the code indicates the string is a
const char * passed into fbdev_ouput_create and saved into that device
struct. It is not strdup()ed into there.

This patch is to avoid a dereference into a block of memory freed in
fbdev_output_destroy()

Rob

It sounds like you did the analysis. I was just thinking that it may be something freed by the destroy function, but it is not.

_______________________________________________
wayland-devel mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/wayland-devel

Reply via email to