diff options
| author | Andrei Emeltchenko <andrei.emeltchenko@intel.com> | 2014-08-01 11:44:34 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2014-08-05 17:09:14 +0300 |
| commit | 6df15b54156e9492aaab7a130fe44eb1ae2af973 (patch) | |
| tree | 2c0f1a5db80b7549fda5766cb9598053d5f835ed /gobex | |
| parent | dfd54b9eaa262b8a73976f9672bcc60ba0ed1ba4 (diff) | |
| download | bluez-6df15b54156e9492aaab7a130fe44eb1ae2af973.tar.gz | |
gobex: Fix use after free
transfer_complete() frees transfer pointer.
Diffstat (limited to 'gobex')
| -rw-r--r-- | gobex/gobex-transfer.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/gobex/gobex-transfer.c b/gobex/gobex-transfer.c index 84981778a..6dc7d9f54 100644 --- a/gobex/gobex-transfer.c +++ b/gobex/gobex-transfer.c @@ -378,6 +378,7 @@ static void transfer_put_req_first(struct transfer *transfer, GObexPacket *req, if (!g_obex_send(transfer->obex, rsp, &err)) { transfer_complete(transfer, err); g_error_free(err); + return; } if (rspcode != G_OBEX_RSP_CONTINUE) |