| Patrick Williams | b48b7b4 | 2016-08-17 15:04:38 -0500 | [diff] [blame^] | 1 | xorg-server-1.7.3/hw/xfree86/common/xf86Helper.c contains this code |
| 2 | causing a double free crash on chvt or exit: |
| 3 | |
| 4 | /* This should *really* be handled in drv->UnInit(dev) call instead, but |
| 5 | * if the driver forgets about it make sure we free it or at least crash |
| 6 | * with flying colors */ |
| 7 | if (pInp->private) |
| 8 | xfree(pInp->private); |
| 9 | Index: xf86-input-tslib-0.0.6/src/tslib.c |
| 10 | =================================================================== |
| 11 | --- xf86-input-tslib-0.0.6.orig/src/tslib.c |
| 12 | +++ xf86-input-tslib-0.0.6/src/tslib.c |
| 13 | @@ -435,6 +435,7 @@ xf86TslibUninit(InputDriverPtr drv, Inpu |
| 14 | xf86TslibControlProc(pInfo->dev, DEVICE_OFF); |
| 15 | ts_close(priv->ts); |
| 16 | xfree(pInfo->private); |
| 17 | + pInfo->private = NULL; |
| 18 | xf86DeleteInput(pInfo, 0); |
| 19 | } |
| 20 | |