On 01/07/2016 04:46 AM, John Ernberg wrote:
From: John Ernberg <john.ernberg(a)actia.se>
When issuing a Scan() in poor reception while attached to an operator it's
fully possible to get no results, which causes the attached operator to be
cleaned up. In certain scenarios this would cause a use-after-free as there
are still references to this operator.
Transfer the attached operator to the new list regardless of removal caused
by the Scan() results.
src/network.c | 16 ++++++++++++++--
1 file changed, 14 insertions(+), 2 deletions(-)
Looks good to me. I tweaked the commit header slightly and applied the