diff options
| author | Michael Brown | 2011-07-16 02:46:12 +0200 |
|---|---|---|
| committer | Michael Brown | 2011-07-16 02:49:47 +0200 |
| commit | 17f09dfe03a8c6b46d30844d3cee28266b6971fe (patch) | |
| tree | 519f0c558d7e5dc4a2387fcc16ab3d7c6405b7d1 /src/core | |
| parent | [ipv4] Use broadcast link-layer address for all broadcast IPv4 addresses (diff) | |
| download | ipxe-17f09dfe03a8c6b46d30844d3cee28266b6971fe.tar.gz ipxe-17f09dfe03a8c6b46d30844d3cee28266b6971fe.tar.xz ipxe-17f09dfe03a8c6b46d30844d3cee28266b6971fe.zip | |
[retry] Fix potential use-after-free in timer_expired()
timer->refcnt is allowed to be NULL, in which case the timer's
expired() method may end up freeing the timer object.
Discovered using valgrind.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/core')
0 files changed, 0 insertions, 0 deletions