Changeset 05816dd for protocols/msn

Timestamp:

2015-02-22T22:44:40Z (10 years ago)

Author:

dequis <dx@…>

Branches:

master

Children:

570f183

Parents:

91f06e5

git-author:

dequis <dx@…> (22-02-15 22:04:08)

git-committer:

dequis <dx@…> (22-02-15 22:44:40)

Message:

coverity: Fix some (harmless?) use-after-free with g_slist_remove()

These were passing a pointer to a variable right after it was g_free()'d

They are most likely harmless as g_slist_remove() probably just needs
the pointer location, but fixing it anyway.

Location:

protocols/msn

Files:

• msn.c (modified) (2 diffs)
• ns.c (modified) (1 diff)
• sb.c (modified) (1 diff)

protocols/msn/msn.c

@@ -112 +112 @@
                 while (md->groups) {
                         struct msn_group *mg = md->groups->data;
+                        md->groups = g_slist_remove(md->groups, mg);
                         g_free(mg->id);
                         g_free(mg->name);
                         g_free(mg);
-                        md->groups = g_slist_remove(md->groups, mg);
                 }
 
@@ -127 +127 @@
                 while (md->grpq) {
                         struct msn_groupadd *ga = md->grpq->data;
+                        md->grpq = g_slist_remove(md->grpq, ga);
                         g_free(ga->group);
                         g_free(ga->who);
                         g_free(ga);
-                        md->grpq = g_slist_remove(md->grpq, ga);
                 }
 

protocols/msn/ns.c

@@ -944 +944 @@
                 struct msn_message *m = (*msgq)->data;
 
+                *msgq = g_slist_remove(*msgq, m);
                 g_free(m->who);
                 g_free(m->text);
                 g_free(m);
-
-                *msgq = g_slist_remove(*msgq, m);
-        }
-}
+        }
+}

protocols/msn/sb.c

@@ -519 +519 @@
                                         }
                                 }
+                                sb->msgq = g_slist_remove(sb->msgq, m);
                                 g_free(m->text);
                                 g_free(m->who);
                                 g_free(m);
-
-                                sb->msgq = g_slist_remove(sb->msgq, m);
                         }