diff options
| author | Tux3 / Mlkj / !Lev.uXFMLA <barrdetwix@gmail.com> | 2014-10-25 12:28:54 +0200 |
|---|---|---|
| committer | Tux3 / Mlkj / !Lev.uXFMLA <barrdetwix@gmail.com> | 2014-10-25 12:29:10 +0200 |
| commit | ea4320733f62c7b3ccc34edde6fc95043bb2d663 (patch) | |
| tree | 063053807bc2eccbd13ab752bace1f099df9a68d /toxcore/tox.h | |
| parent | 9878b441b1d2b175b20d28cc41406280e3cada31 (diff) | |
Fix use-after-free of toxav's TimerHandler
If msi.c:timer_terminate_session frees "handler", then when msi.c:timer_poll's thread resumes, there WILL be a use after free of "handler", with a likely segfault.
This use after free causes a crash in qTox, see tux3/qTox#534
Diffstat (limited to 'toxcore/tox.h')
0 files changed, 0 insertions, 0 deletions