diff options
| author | Nate Rosenblum <nater@maginatics.com> | 2013-09-03 14:46:47 -0700 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2013-09-09 11:59:00 -0400 |
| commit | 5eb178855a7263a50e38139089720fef7c3a1642 (patch) | |
| tree | 4eb4b9fd1ab7bafc5d7752221b23ae8e38b1bc40 /evutil_rand.c | |
| parent | c83efb801fefe4e10211c1a1d02ecd123926fb8c (diff) | |
| download | libevent-5eb178855a7263a50e38139089720fef7c3a1642.tar.gz | |
Avoid racy bufferevent activation
The evhttp_send_reply method invokes evhttp_write_buffer with a
callback that may release the underlying request object and
bufferevent upon completion. This cleanup callback is invoked by the
underlying bufferevent's write callback. Improperly enabling write
events before referencing the bufferevent could lead to use after free
and memory corruption.
Diffstat (limited to 'evutil_rand.c')
0 files changed, 0 insertions, 0 deletions