diff options
| author | Milan Crha <mcrha@redhat.com> | 2022-10-10 09:38:55 +0200 |
|---|---|---|
| committer | Carlos Garcia Campos <cgarcia@igalia.com> | 2022-10-11 15:19:08 +0200 |
| commit | a04dff4a8c7fc76933fe9358475e1625fc29680e (patch) | |
| tree | 9f4d7198d31a62ca1ed6c9808e46662408bb62a5 | |
| parent | d673228b0c74088ce59a5bfeea4db245fd7e8ed0 (diff) | |
| download | libsoup-a04dff4a8c7fc76933fe9358475e1625fc29680e.tar.gz | |
soup-session: Fix memory free of reversed GList
The g_list_reverse() modifies the `items` in a way, which can mean
the later call of `g_list_free (items);` frees only the last item,
not all of the items.
| -rw-r--r-- | libsoup/soup-session.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/libsoup/soup-session.c b/libsoup/soup-session.c index e3577428..de0da49c 100644 --- a/libsoup/soup-session.c +++ b/libsoup/soup-session.c @@ -1824,7 +1824,9 @@ async_run_queue (SoupSession *session) g_queue_foreach (priv->queue, (GFunc)collect_queue_item, &items); g_mutex_unlock (&priv->queue_mutex); - for (i = g_list_reverse (items); i != NULL; i = g_list_next (i)) { + items = g_list_reverse (items); + + for (i = items; i != NULL; i = g_list_next (i)) { SoupMessageQueueItem *item = (SoupMessageQueueItem *)i->data; soup_session_process_queue_item (item->session, item, TRUE); } |