sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-24 02:04:21 +03:00
Code

r2737: fixed up a corner case where talloc_unreference() and talloc_free()

Browse Source 
might not place the pointer in the context specified in the docs. The
code was assuming that pointer was at the head of the child list,
which it may not be, depending on what other operations have happened
in between.
(This used to be commit e62bd7ef7ec80365ab00ce5b2051b7dc1726304b)
This commit is contained in:
Andrew Tridgell 2004-09-28 21:41:33 +00:00 committed by Gerald (Jerry) Carter
parent b79602fab5
commit da0e9d5f62
1 changed files with 17 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
source4/lib/talloc.c
View File

@ -63,6 +63,17 @@ static struct talloc_chunk *talloc_chunk_from_ptr(const void *ptr)
return tc;
}
/*
return the parent chunk of a pointer
*/
static struct talloc_chunk *talloc_parent_chunk(const void *ptr)
{
struct talloc_chunk *tc = talloc_chunk_from_ptr(ptr);
while (tc->prev) tc=tc->prev;
return tc->parent;
}
/*
Allocate a bit of memory as a child of an existing pointer
*/
@ -185,8 +196,7 @@ void *talloc_unreference(const void *context, const void *ptr)
}
for (h=tc->refs;h;h=h->next) {
struct talloc_chunk *tc2 = talloc_chunk_from_ptr(h);
const void *parent = tc2->parent?tc2->parent+1:null_context;
const void *parent = talloc_parent_chunk(h);
if (parent == context) break;
}
if (h == NULL) {
@ -354,11 +364,12 @@ int talloc_free(void *ptr)
void *child = tc->child+1;
const void *new_parent = null_context;
if (tc->child->refs) {
struct talloc_chunk *ref = talloc_chunk_from_ptr(tc->child->refs);
if (ref->parent) new_parent = ref->parent+1;
struct talloc_chunk *p = talloc_parent_chunk(tc->child->refs);
if (p) new_parent = p+1;
}
if (new_parent == null_context && tc->parent) {
new_parent = tc->parent+1;
if (new_parent == null_context) {
struct talloc_chunk *p = talloc_parent_chunk(ptr);
if (p) new_parent = p+1;
}
talloc_free(talloc_steal(new_parent, child));
}