From 34b8045d902d808716152d36b5d7c91f3dd058ae Mon Sep 17 00:00:00 2001 From: Jean-Philippe Andre Date: Fri, 17 Jan 2014 18:07:33 +0900 Subject: [PATCH] Evas cserve2: Fix invalid memory access In case of load error, we free the file entry, but forgot to reset the pointer to it in the image entry. --- src/lib/evas/cserve2/evas_cs2_client.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/lib/evas/cserve2/evas_cs2_client.c b/src/lib/evas/cserve2/evas_cs2_client.c index 4917fb2811..3591d22914 100644 --- a/src/lib/evas/cserve2/evas_cs2_client.c +++ b/src/lib/evas/cserve2/evas_cs2_client.c @@ -723,7 +723,10 @@ _image_opened_cb(void *data, const void *msg_received, int size) else ERR("Invalid message type received: %d (%s)", answer->type, __FUNCTION__); EINA_REFCOUNT_UNREF(fentry) - eina_hash_del(_file_entries, fentry->hkey, fentry); + { + eina_hash_del(_file_entries, fentry->hkey, fentry); + ie->data1 = NULL; + } return EINA_TRUE; }