[patch] null after free

John (J5) Palmieri johnp at redhat.com
Fri Oct 1 20:42:06 UTC 2004

An unfortunate breakage in glibc's getgrouplist function led me to this
bug in a rarely used error code path.  Basically on errors in the
fill_user_info function there is a double free of the info structure.  I
have a quick fix which nulls out the structure after the free.  This
ensures that double frees don't crash dbus.  This however is a bandaid
and we need to look at why the double free is happening and to determine
which of the frees is the correct one. 

The glibc guys took care of the glib bug so no worries there.

John (J5) Palmieri
Associate Software Engineer
Desktop Group
Red Hat, Inc.
Blog: http://martianrock.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dbus-0.22-nullafterfree.patch
Type: text/x-patch
Size: 363 bytes
Desc: not available
Url : http://freedesktop.org/pipermail/dbus/attachments/20041001/06889483/dbus-0.22-nullafterfree.bin

More information about the dbus mailing list