linuxstb / pidvbip

tvheadend client for the Raspberry Pi
http://www.pidvbip.org
GNU General Public License v2.0
53 stars 22 forks source link

Fix list segfault #41

Open bertm opened 8 years ago

bertm commented 8 years ago

Entries were memset() to zero to erase them on eventUpdate, unintentionally erasing the list member and corrupting the list they are contained in. This resets the list member to its original value after all members have been zeroed.

This fixes a null dereference in event_delete, that occurs when the entry after or before the corrupted entry is deleted. There, list_del would dereference the next pointer of the previous entry (and vice-versa), dereferencing a zeroed value.

This issue caused pidvbip to crash at least once per day for me, I have not experienced any such crash with this patch applied in some limited testing.