diff options
| author | Anuj Phogat <[email protected]> | 2012-01-03 18:12:06 -0800 |
|---|---|---|
| committer | Anuj Phogat <[email protected]> | 2012-01-03 19:04:03 -0800 |
| commit | 0ed11e333147e280208d9d0b3ff3f39970547643 (patch) | |
| tree | eb47c82b7dc3056e9519916a6aded866e1101bd7 /src/glsl/ir_function_can_inline.cpp | |
| parent | 2f1ab63fab592264c13e7dbab39a5cea1a622903 (diff) | |
Fix read from pointer after free
Coverity reported a read from pointer after free defect in
src/mesa/drivers/dri/intel/intel_mipmap_tree.c. Bug# 44205
In intel_miptree_all_slices_resolve() function, i = i->next was
executing after freeing i. I have defined a temporary variable
(next) to store the value of i->next before freeing i
Reported-by: Vinson Lee <[email protected]>
Signed-off-by: Anuj Phogat <[email protected]>
Reviewed-by: Eric Anholt <[email protected]>
Diffstat (limited to 'src/glsl/ir_function_can_inline.cpp')
0 files changed, 0 insertions, 0 deletions