From bb123f42bb81c17f9c20926ad7b38bceb63cb316 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Mon, 25 Oct 2010 11:14:04 +0200 Subject: [PATCH 3/3] Fix double free issue --- src/responder/common/responder_dp.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/responder/common/responder_dp.c b/src/responder/common/responder_dp.c index f8c3b6f..b2b5d40 100644 --- a/src/responder/common/responder_dp.c +++ b/src/responder/common/responder_dp.c @@ -95,12 +95,12 @@ static int sss_dp_req_destructor(void *ptr) cb = sdp_req->cb_list; while (cb) { + next = cb->next; + /* It is the responsibility of the callback to free cb */ cb->callback(sdp_req->err_maj, sdp_req->err_min, sdp_req->err_msg, cb->callback_ctx); - next = cb->next; - talloc_free(cb); cb = next; } -- 1.7.2.3