audacia
/
audacia
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Bug1223: (correction). Fix new potential crash in following pointer. 

With recent changes to the Nyquist code for freeing blocks, the pointer 'next' could be uninitialised when 'list' points to the zero chain.  So Audacity would follow a rogue pointer.  We'd get away with it if the uninitialised value happened to be zero.
This commit is contained in:
James Crook 2016-06-26 08:35:19 +01:00
parent e8f72051f2
commit 016919a53b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib-src/libnyquist/nyquist/nyqsrc/sound.c
View File

@ -528,6 +528,7 @@ void snd_list_unref(snd_list_type list)
break; // the rest of the list is shared, nothing more to free
}
next = NULL;
// list nodes either point to a block of samples or this is the
// last list node (list->block == NULL) which points to a suspension
// lists can also terminate at the zero_block, which is an infinite
@ -540,7 +541,6 @@ void snd_list_unref(snd_list_type list)
/* free suspension structure */
/* nyquist_printf("freeing susp@%p\n", list->u.susp); */
(*(list->u.susp->free))(list->u.susp);
next = NULL;
}
/* if (list == list_watch)
printf("freeing watched snd_list %p\n", list); */