Dave Airlie 07c36e4fdc dix/resource: fix use after free in resource code with DRI ...

LookupClientResourceComplex is used by DRI1 code to find and free a DRI
drawable in a callback, however when the DRI code returns this->value
is now pointing at freed memory. It seemed easiest to store the value
to a temporary and return it afterwards.

Another option might be a new FreeClientResourceComplex or one that
also returns the id, so we can free it using an alternative means.

found using valgrind.

amended along ajax's suggestions

2009-06-24 10:44:11 +10:00

25 KiB

Raw Blame History

View Raw