Bug 11807

Summary:	Use after free in src/glu/sgi/libnurbs/interface/bezierPatch.cc
Product:	Mesa	Reporter:	Roland "Test-tools" Bär <roland>
Component:	GLU	Assignee:	mesa-dev
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	medium	Keywords:	janitor, patch
Version:	unspecified
Hardware:	Other
OS:	All
Whiteboard:
i915 platform:		i915 features:
Attachments:	Rewrote that iterating

Description Roland "Test-tools" Bär 2007-08-02 01:25:47 UTC

When applying the increment "temp = temp->next", the variable temp was already free()d. Patch attached...

Comment 1 Roland "Test-tools" Bär 2007-08-02 01:26:35 UTC

Created attachment 10954 [details] [review]
Rewrote that iterating

Comment 2 Brian Paul 2007-08-02 07:40:55 UTC

fixed.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.