On Mon, 15 Apr 2002, Justin Erenkrantz wrote:

> I bet it could be related to a double-free condition.  That would
> make the most sense (to me).
> I'm not sure which commit Cliff is talking about to OS/2.

---------------------------------------------------------------
CVS log for httpd-2.0/server/mpm/mpmt_os2/mpmt_os2_child.c

Revision 1.20 / (download) - annotate - [select for diffs] , Sun Apr 14
06:18:13 2002 UTC (35 hours, 43 minutes ago) by bjh
Branch: MAIN
CVS Tags: HEAD
Changes since 1.19: +0 -1 lines
Diff to previous 1.19 (colored)
apr_bucket_alloc_create() now registers a cleanup that does a
apr_bucket_alloc_destroy(). Don't double free by calling it explicitly.
---------------------------------------------------------------

In this case, it was that the apr_bucket_alloc_t was created in pconn.
The newly-added cleanup on pconn would destroy the apr_bucket_alloc_t.
Then an explicit call to apr_bucket_alloc_destroy *after* destroying pconn
would result in a double-free at best or an immediate segfault at worst.

--Cliff


--------------------------------------------------------------
   Cliff Woolley
   [EMAIL PROTECTED]
   Charlottesville, VA


Reply via email to