Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > muc.lists.freebsd.multimedia > #13404

[Bug 297187] `bcm2835_audio_release()` Uses a Freed VCHI Service After Close

Show all headers | View raw

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297187

Christos Margiolis <christos@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |In Progress

--- Comment #6 from Christos Margiolis <christos@freebsd.org> ---
Mark, the patch and the analysis looks good to me. vchi_service_close() casts
"handle" to "service":

SHIM_SERVICE_T *service = (SHIM_SERVICE_T *)handle;

And then if vchiq_close_service() succeeds, it frees "service", i.e., handle.
The fix seems correct even though I don't have the HW to test it.

-- 
You are receiving this mail because:
You are the assignee for the bug.

--
Posted automagically by a mail2news gateway at muc.de e.V.
Please direct questions, flames, donations, etc. to news-admin@muc.de

Back to muc.lists.freebsd.multimedia | Previous | Next | Find similar | Unroll thread

Thread

[Bug 297187] `bcm2835_audio_release()` Uses a Freed VCHI Service After Close bugzilla-noreply@freebsd.org - 2026-08-12 11:37 +0000

csiph-web