jpeg pushed a commit to branch master. http://git.enlightenment.org/core/efl.git/commit/?id=34b8045d902d808716152d36b5d7c91f3dd058ae
commit 34b8045d902d808716152d36b5d7c91f3dd058ae Author: Jean-Philippe Andre <[email protected]> Date: Fri Jan 17 18:07:33 2014 +0900 Evas cserve2: Fix invalid memory access In case of load error, we free the file entry, but forgot to reset the pointer to it in the image entry. --- src/lib/evas/cserve2/evas_cs2_client.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/lib/evas/cserve2/evas_cs2_client.c b/src/lib/evas/cserve2/evas_cs2_client.c index 4917fb2..3591d22 100644 --- a/src/lib/evas/cserve2/evas_cs2_client.c +++ b/src/lib/evas/cserve2/evas_cs2_client.c @@ -723,7 +723,10 @@ _image_opened_cb(void *data, const void *msg_received, int size) else ERR("Invalid message type received: %d (%s)", answer->type, __FUNCTION__); EINA_REFCOUNT_UNREF(fentry) - eina_hash_del(_file_entries, fentry->hkey, fentry); + { + eina_hash_del(_file_entries, fentry->hkey, fentry); + ie->data1 = NULL; + } return EINA_TRUE; } --
