jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

coverity: read from pointer after free

Browse Source
This commit is contained in:
Laxmikant Rashinkar 2014-07-27 14:11:02 -07:00
parent 5e537ebdfe
commit a9d7c13147
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sesman/chansrv/chansrv_fuse.c
View File

@ -2626,7 +2626,6 @@ static void xfuse_cb_release(fuse_req_t req, fuse_ino_t ino, struct
fip, fip->fi, fip->fi->fh); fip, fip->fi, fip->fi->fh);
FileId = handle->FileId; FileId = handle->FileId;
free(handle);
fip->fi->fh = 0; fip->fi->fh = 0;
xinode->close_in_progress = 1; xinode->close_in_progress = 1;
@ -2635,6 +2634,8 @@ static void xfuse_cb_release(fuse_req_t req, fuse_ino_t ino, struct
log_error("failed to send devredir_close_file() cmd"); log_error("failed to send devredir_close_file() cmd");
fuse_reply_err(req, EREMOTEIO); fuse_reply_err(req, EREMOTEIO);
} }
free(handle);
} }
/** /**

2
xrdp/xrdp_mm.c
View File

@ -2374,8 +2374,8 @@ server_paint_rects(struct xrdp_mod* mod, int num_drects, short *drects,
g_malloc(sizeof(short) * num_crects * 4, 0); g_malloc(sizeof(short) * num_crects * 4, 0);
if (enc_data->crects == 0) if (enc_data->crects == 0)
{ {
g_free(enc_data);
g_free(enc_data->drects); g_free(enc_data->drects);
g_free(enc_data);
return 1; return 1;
} }