use-after-free in libdrm

StDenis, Tom Tom.StDenis at amd.com
Mon Sep 12 16:00:36 UTC 2016


Attached image of scan-view's report.  Basically the variable "sem" is free'ed but then used as sem->next in the for loop.  Should use safe version of macro.


Tom
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/amd-gfx/attachments/20160912/f36c175c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: list_use_after_free.png
Type: image/png
Size: 85211 bytes
Desc: list_use_after_free.png
URL: <https://lists.freedesktop.org/archives/amd-gfx/attachments/20160912/f36c175c/attachment-0001.png>


More information about the amd-gfx mailing list