From dd07c522c92dd54cba5f42382dc5b1756750da36 Mon Sep 17 00:00:00 2001 From: Russ Butler Date: Mon, 29 Aug 2016 17:14:16 -0500 Subject: [PATCH] Fix double free in NanostackInterface When freeing all memory in the rx buffer chain set the head pointer to NULL. This prevents the head rx buffer from getting freed twice. --- .../net/FEATURE_IPV6/nanostack-interface/NanostackInterface.cpp | 1 + 1 file changed, 1 insertion(+) diff --git a/features/net/FEATURE_IPV6/nanostack-interface/NanostackInterface.cpp b/features/net/FEATURE_IPV6/nanostack-interface/NanostackInterface.cpp index 9cd5688c42..6571d7faba 100644 --- a/features/net/FEATURE_IPV6/nanostack-interface/NanostackInterface.cpp +++ b/features/net/FEATURE_IPV6/nanostack-interface/NanostackInterface.cpp @@ -368,6 +368,7 @@ void NanostackSocket::data_free_all(void) // No mode requirement NanostackBuffer *buffer = rxBufChain; + rxBufChain = NULL; while (buffer != NULL) { NanostackBuffer *next_buffer = buffer->next; FREE(buffer);