lavapipe: Resolved write to pointer after free

Write to "alloc" pointer variable after free "alloc"

Fixes: d74ea2c117 ("llvmpipe: Implement dmabuf handling")

Signed-off-by: liuqiang <liuqiang@kylinos.cn>
Reviewed-by: Erik Faye-Lund <erik.faye-lund@collabora.com>
Reviewed-by: Lucas Fryzek <lfryzek@igalia.com>
Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/32292>
(cherry picked from commit 82e68de681)
This commit is contained in:
liuqiang 2024-11-22 10:03:12 +08:00 committed by Dylan Baker
parent c489be4522
commit cd8c4e92cf
2 changed files with 2 additions and 1 deletions

View file

@ -924,7 +924,7 @@
"description": "lavapipe: Resolved write to pointer after free",
"nominated": true,
"nomination_type": 2,
"resolution": 0,
"resolution": 1,
"main_sha": null,
"because_sha": "d74ea2c117fe96e527471e572336f931c3c77da1",
"notes": null

View file

@ -1506,6 +1506,7 @@ llvmpipe_import_memory_fd(struct pipe_screen *screen,
if (!ret) {
free(alloc);
*ptr = NULL;
return false;
} else {
*ptr = (struct pipe_memory_allocation*)alloc;
}