From: Kay Sievers <kay@vrfy.org>
Date: Wed, 25 Dec 2013 04:16:36 +0000 (+0100)
Subject: connection: fix access-after-free
X-Git-Tag: upstream/0.20140120.123719~94
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=cc3d6fd2ba67f79965828e82e2947611354ab974;p=platform%2Fcore%2Fsystem%2Fkdbus-bus.git

connection: fix access-after-free
---

diff --git a/connection.c b/connection.c
index 8e6866b..2d13658 100644
--- a/connection.c
+++ b/connection.c
@@ -1060,10 +1060,11 @@ int kdbus_conn_drop_msg(struct kdbus_conn *conn)
 				 struct kdbus_conn_queue, entry);
 	list_del(&queue->entry);
 	conn->msg_count--;
+
+	kdbus_pool_free_range(conn->pool, queue->off);
 	mutex_unlock(&conn->lock);
 
 	kdbus_conn_queue_cleanup(queue);
-	kdbus_pool_free_range(conn->pool, queue->off);
 	return 0;
 
 exit_unlock: