From 9614b7b5ad422b628e72e8a2e90e471b176e14a1 Mon Sep 17 00:00:00 2001 From: dimitri staessens Date: Tue, 28 Mar 2017 11:05:18 +0200 Subject: ipcpd: Fix use-after-free in frct --- src/ipcpd/normal/frct.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/ipcpd/normal/frct.c b/src/ipcpd/normal/frct.c index 01bdb660..017d0d93 100644 --- a/src/ipcpd/normal/frct.c +++ b/src/ipcpd/normal/frct.c @@ -371,10 +371,11 @@ int frct_i_destroy(cep_id_t id, pci.qos_id = instance->cube; frct.instances[id] = NULL; - destroy_frct_i(instance); release_cep_id(instance->cep_id); + destroy_frct_i(instance); + pthread_mutex_unlock(&frct.instances_lock); if (buf != NULL && buf->data != NULL) -- cgit v1.2.3