proxmox-mirrors/mirror_corosync
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_corosync synced 2025-07-24 20:05:04 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Patch from Miyotaka Sakai to fix access to free area defect 426.

Browse Source 
(Logical change 1.168)


git-svn-id: http://svn.fedorahosted.org/svn/corosync/trunk@575 fd59a12c-fef9-0310-b244-a6a79926bd2f
This commit is contained in:
Steven Dake 2005-04-05 01:51:09 +00:00
parent 3afff77412
commit ee38b3da97
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
exec/totemsrp.c
View File

@ -2740,6 +2740,7 @@ void totemsrp_callback_token_destroy (void **handle_out)
h = (struct token_callback_instance *)*handle_out;
list_del (&h->list);
free (h);
h = NULL;
*handle_out = 0;
}
}
@ -2759,6 +2760,7 @@ void token_callbacks_execute (enum totem_callback_token_type type)
struct list_head *callback_listhead = 0;
struct token_callback_instance *token_callback_instance;
int res;
int del;
switch (type) {
case TOTEM_CALLBACK_TOKEN_RECEIVED:
@ -2775,22 +2777,22 @@ void token_callbacks_execute (enum totem_callback_token_type type)
list = list_next) {
token_callback_instance = list_entry (list, struct token_callback_instance, list);
list_next = list->next;
if (token_callback_instance->delete == 1) {
del = token_callback_instance->delete;
if (del == 1) {
list_del (list);
}
res = token_callback_instance->callback_fn (
token_callback_instance->callback_type,
token_callback_instance->data);
/*
* This callback failed to execute, try it again on the next token
*/
if (res == -1 && token_callback_instance->delete == 1) {
if (res == -1 && del == 1) {
list_add (list, callback_listhead);
} else
if (token_callback_instance->delete) {
} else if (del) {
free (token_callback_instance);
}
}