From 6df15b54156e9492aaab7a130fe44eb1ae2af973 Mon Sep 17 00:00:00 2001 From: Andrei Emeltchenko Date: Fri, 1 Aug 2014 11:44:34 +0300 Subject: gobex: Fix use after free transfer_complete() frees transfer pointer. --- gobex/gobex-transfer.c | 1 + 1 file changed, 1 insertion(+) (limited to 'gobex') diff --git a/gobex/gobex-transfer.c b/gobex/gobex-transfer.c index 84981778a..6dc7d9f54 100644 --- a/gobex/gobex-transfer.c +++ b/gobex/gobex-transfer.c @@ -378,6 +378,7 @@ static void transfer_put_req_first(struct transfer *transfer, GObexPacket *req, if (!g_obex_send(transfer->obex, rsp, &err)) { transfer_complete(transfer, err); g_error_free(err); + return; } if (rspcode != G_OBEX_RSP_CONTINUE) -- cgit v1.2.1