mirrors/pipewire
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/pipewire/pipewire.git synced 2025-11-03 09:01:54 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

media-session: don't write to freed memory in sm_object_destroy

Browse source 
Unref of node->handle may also free obj, if it was created by
init_object.
This commit is contained in:
Pauli Virtanen 2021-01-09 20:36:38 +02:00
parent 7ae1ea1420
commit d87f838e09
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/examples/media-session/media-session.c
View file

@ -317,13 +317,13 @@ int sm_object_destroy(struct sm_object *obj)
spa_list_remove(&d->link); spa_list_remove(&d->link);
free(d); free(d);
} }
if (p)
pw_proxy_unref(p);
if (h)
pw_proxy_unref(h);
obj->proxy = NULL; obj->proxy = NULL;
obj->handle = NULL; obj->handle = NULL;
if (p)
pw_proxy_unref(p);
if (h)
pw_proxy_unref(h); /* may free obj, if from init_object */
return 0; return 0;
} }