On Tue 03 Jan 2012 07:14:09 PM PST, Ian Romanick wrote:
> On 01/03/2012 06:36 PM, Anuj Phogat wrote:
>> Coverity reported a read from pointer after free defect in
>> src/mesa/drivers/dri/intel/intel_mipmap_tree.c
>> In intel_miptree_all_slices_resolve() function, i = i->next was
>> executing after
On 01/03/2012 06:36 PM, Anuj Phogat wrote:
Coverity reported a read from pointer after free defect in
src/mesa/drivers/dri/intel/intel_mipmap_tree.c
In intel_miptree_all_slices_resolve() function, i = i->next was
executing after freeing i. I have defined a temporary variable
(next) to store the v
On Tue, 3 Jan 2012 18:36:22 -0800, Anuj Phogat wrote:
> Coverity reported a read from pointer after free defect in
> src/mesa/drivers/dri/intel/intel_mipmap_tree.c
> In intel_miptree_all_slices_resolve() function, i = i->next was
> executing after freeing i. I have defined a temporary variable
>
Coverity reported a read from pointer after free defect in
src/mesa/drivers/dri/intel/intel_mipmap_tree.c
In intel_miptree_all_slices_resolve() function, i = i->next was
executing after freeing i. I have defined a temporary variable
(next) to store the value of i->next before freeing i
Reported-by
