Xorg crash when removing an input device

[Fabrice Ménard]

Le vendredi 19 octobre 2007 03:13, Peter Hutterer a écrit :
> Fabrice Ménard wrote:
> > Hi,
> >
> > Using input hotplug, I noticed that the server crashes when I remove a
> > device with the following command
> > dbus-send --system --type=method_call --print-reply \
> >        --dest=org.x.config.display0 /org/x/config/0
> > org.x.config.input.remove\ uint32:X
> > (where X is the device number given by listDevices)
> >
> > The bug comes from a double freed memory.  When a device is removed
> > DeleteInputDeviceRequest (in xf86Xinput.c) calls RemoveDevice(pDev) then
> > xf86DeleteInput (in xf86Helper.c) and this latter frees something
> > (xfree(pInp)) that has been previously freed by RemoveDevice.
> >
> > This proposed patch is ok for me but I don't know if xf86DeleteInput is
> > called outside DeleteInputDeviceRequest (therefore without calling
> > RemoveDevice)
>
> what driver are you using?

-- 
Fabrice Ménard
menard.fabrice at orange.fr
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.x.org/archives/xorg/attachments/20071020/7f905b8b/attachment.pgp>