From 611fcca641a22a2a23b26752105af99cf338d6a1 Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Thu, 31 Jan 2013 16:34:41 +0100 Subject: tevent_poll: Avoid a crash in poll_fresh_fde_destructor The event context might have been freed before the fde Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher Reviewed-by: Jeremy Allison --- lib/tevent/tevent_poll.c | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) (limited to 'lib') diff --git a/lib/tevent/tevent_poll.c b/lib/tevent/tevent_poll.c index 0c580e49ee..f63173744f 100644 --- a/lib/tevent/tevent_poll.c +++ b/lib/tevent/tevent_poll.c @@ -218,8 +218,15 @@ done: static int poll_fresh_fde_destructor(struct tevent_fd *fde) { - struct poll_event_context *poll_ev = talloc_get_type_abort( - fde->event_ctx->additional_data, struct poll_event_context); + struct tevent_context *ev = fde->event_ctx; + struct poll_event_context *poll_ev; + + if (ev == NULL) { + return 0; + } + poll_ev = talloc_get_type_abort( + ev->additional_data, struct poll_event_context); + DLIST_REMOVE(poll_ev->fresh, fde); return 0; } -- cgit