Blame xdmcp-use-after-free.patch
|
 |
9dc4791 |
--- gdm-2.26.1/daemon/gdm-xdmcp-display-factory.c.orig 2009-03-16 20:12:08.000000000 +0000
|
|
|
9dc4791 |
+++ gdm-2.26.1/daemon/gdm-xdmcp-display-factory.c 2009-04-23 11:49:50.000000000 +0100
|
|
|
9dc4791 |
@@ -2309,8 +2309,6 @@
|
|
|
9dc4791 |
authorization_data.data = (CARD8 *) cookie->data;
|
|
|
9dc4791 |
authorization_data.length = cookie->len;
|
|
|
9dc4791 |
|
|
|
9dc4791 |
- g_array_free (cookie, TRUE);
|
|
|
9dc4791 |
-
|
|
|
9dc4791 |
/* the addrs are NOT copied */
|
|
|
9dc4791 |
gdm_xdmcp_send_accept (factory,
|
|
|
9dc4791 |
address,
|
|
|
9dc4791 |
@@ -2319,6 +2317,8 @@
|
|
|
9dc4791 |
&authentication_data,
|
|
|
9dc4791 |
&authorization_name,
|
|
|
9dc4791 |
&authorization_data);
|
|
|
9dc4791 |
+
|
|
|
9dc4791 |
+ g_array_free (cookie, TRUE);
|
|
|
9dc4791 |
}
|
|
|
9dc4791 |
}
|
|
|
9dc4791 |
} else {
|