The wakeup timer is used by the worker thread and by the
main thread.
Destroying the object before destroying the worker thread
can lead to use after free.
Destroying the worker thread first makes sure we don't race.
This is detected easily when compiling the test with address sanitizer.
Signed-off-by: Frediano Ziglio <fziglio@xxxxxxxxxx>
---
server/tests/test-display-base.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
Changes since v1:
- update commit message and shortlog.
diff --git a/server/tests/test-display-base.c b/server/tests/test-display-base.c
index 14311dbc2..c35eec1da 100644
--- a/server/tests/test-display-base.c
+++ b/server/tests/test-display-base.c
@@ -921,8 +921,10 @@ Test *test_new(SpiceCoreInterface *core)
void test_destroy(Test *test)
{
- test->core->timer_remove(test->wakeup_timer);
spice_server_destroy(test->server);
+ // this timer is used by spice server so
+ // avoid to free it while is running
+ test->core->timer_remove(test->wakeup_timer);
free(test->commands);
free(test);
}
--
2.13.5
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel