Subject: Re: use-after-free bug in acpi_ec.c?
From: Tobias Nygren <tnn@NetBSD.org>
Date: 12/03/2007 15:39:14
On Mon, 3 Dec 2007 15:33:30 +0100
Joerg Sonnenberger <email@example.com> wrote:
> On Mon, Dec 03, 2007 at 03:22:46PM +0100, Tobias Nygren wrote:
> > On Mon, 3 Dec 2007 13:29:47 +0100
> > Joerg Sonnenberger <firstname.lastname@example.org> wrote:
> > > On Mon, Dec 03, 2007 at 01:28:13AM +0100, Tobias Nygren wrote:
> > > > Am I the only one seeing this? If you apply the patch and see the
> > > > messages I guess it's just pure luck that it doesn't crash for most
> > > > people ...
> > >
> > > Can you try jmcneill-pm? It has completely different EC code and will be
> > > merged soon.
> > The pm branch has the same use-after-free flaw.
> The jmcneill-pm branch attaches two acpiec devices via the normal
> mechanisms and doesn't do any free any context.
I apparently botched my checkout, let me have another look.