[Mesa-dev] [PATCH] Bug 44205 - read from pointer after free

[Eric Anholt]

On Tue,  3 Jan 2012 18:36:22 -0800, Anuj Phogat <anuj.phogat at gmail.com> wrote:
> Coverity reported a read from pointer after free defect in
> src/mesa/drivers/dri/intel/intel_mipmap_tree.c
> In intel_miptree_all_slices_resolve() function, i = i->next was
> executing after freeing i. I have defined a temporary variable
> (next) to store the value of i->next before freeing i

Reviewed-by: Eric Anholt <eric at anholt.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.freedesktop.org/archives/mesa-dev/attachments/20120103/96d2f0f7/attachment.pgp>