Displaying 2 results from an estimated 2 matches for "n203".
Did you mean:
203
2014 Mar 05
0
[Bug 75279] XCloseDisplay() takes one minute around nouveau_dri.so, freezing Firefox startup
...acob at mozilla.com> ---
The stack to the free() points to line 203 here, while the stack to where the
free'd data is subsequently used points to line 205 here:
http://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/nouveau/nouveau_fence.c?id=ce6dd69697ae62d9336bbd4f5808bc4d75cdcc04#n203
if (fence == screen->fence.current)
nouveau_fence_next(screen);
do {
nouveau_fence_update(screen, FALSE); // <--- free here!
if (fence->state == NOUVEAU_FENCE_STATE_SIGNALLED) // <-- use-after-free
return TRUE;
So it seems like nouveau_fence_updat...
2014 Mar 05
0
[Bug 75279] XCloseDisplay() takes one minute around nouveau_dri.so, freezing Firefox startup
...)
> The stack to the free() points to line 203 here, while the stack to where
> the free'd data is subsequently used points to line 205 here:
>
> http://cgit.freedesktop.org/mesa/mesa/tree/src/gallium/drivers/nouveau/
> nouveau_fence.c?id=ce6dd69697ae62d9336bbd4f5808bc4d75cdcc04#n203
>
>
> if (fence == screen->fence.current)
> nouveau_fence_next(screen);
>
> do {
> nouveau_fence_update(screen, FALSE); // <--- free here!
>
> if (fence->state == NOUVEAU_FENCE_STATE_SIGNALLED) // <--
> use-after-free
>...