use-after-free in libdrm
StDenis, Tom
Tom.StDenis at amd.com
Mon Sep 12 16:00:36 UTC 2016
Attached image of scan-view's report. Basically the variable "sem" is free'ed but then used as sem->next in the for loop. Should use safe version of macro.
Tom
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/amd-gfx/attachments/20160912/f36c175c/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: list_use_after_free.png
Type: image/png
Size: 85211 bytes
Desc: list_use_after_free.png
URL: <https://lists.freedesktop.org/archives/amd-gfx/attachments/20160912/f36c175c/attachment-0001.png>
More information about the amd-gfx
mailing list