ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2025-06-11 20:01:48 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

qemu-usb: reset completion pointer

Browse Source 
Reset the completion pointer to prevent a double free in case the
packet is processed during ISOC IN request handling.

Fixes #4041.
This commit is contained in:
Josef Söntgen 2021-02-25 18:31:16 +01:00 committed by Norman Feske
parent c03534e355
commit 42f3d2eccd
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
repos/libports/src/lib/qemu-usb/host.cc
View File

@ -579,6 +579,8 @@ struct Usb_host_device : List<Usb_host_device>::Element
if (packet.completion) { if (packet.completion) {
dynamic_cast<Completion *>(packet.completion)->free(); dynamic_cast<Completion *>(packet.completion)->free();
} }
/* make sure we free the completion only once! */
packet.completion = nullptr;
} }
Completion *find_valid_completion(USBPacket *p) Completion *find_valid_completion(USBPacket *p)