[SCM] libva/master: Add upstream patch to fix use after free
sramacher at users.alioth.debian.org
sramacher at users.alioth.debian.org
Tue Jun 3 12:31:55 UTC 2014
The following commit has been merged in the master branch:
commit a85f2ac64814690d585a87c46550f3a692e920b5
Author: Sebastian Ramacher <sramacher at debian.org>
Date: Tue Jun 3 14:29:30 2014 +0200
Add upstream patch to fix use after free
Closes: #750429
LP: #1325873
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..067133c
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+use-after-free.patch
diff --git a/debian/patches/use-after-free.patch b/debian/patches/use-after-free.patch
new file mode 100644
index 0000000..a1ca276
--- /dev/null
+++ b/debian/patches/use-after-free.patch
@@ -0,0 +1,29 @@
+Description: release VADisplayContext at the end of vaTerminate()
+ Otherwise it will result in invalid reading in va_TraceEnd()
+Origin: upstream, http://cgit.freedesktop.org/libva/commit/?h=staging&id=d4988142a3f2256e38c5c5cdcdfc1b4f5f3c1ea9
+Bug-Debian: https://bugs.debian.org/750429
+Last-Update: 2014-06-03
+
+diff --git a/va/va.c b/va/va.c
+index 6cb17ef..0ba595b 100644
+--- a/va/va.c
++++ b/va/va.c
+@@ -515,15 +515,15 @@ VAStatus vaTerminate (
+ free(old_ctx->vtable_vpp);
+ old_ctx->vtable_vpp = NULL;
+
+- if (VA_STATUS_SUCCESS == vaStatus)
+- pDisplayContext->vaDestroy(pDisplayContext);
+-
+ VA_TRACE_LOG(va_TraceTerminate, dpy);
+
+ va_TraceEnd(dpy);
+
+ va_FoolEnd(dpy);
+
++ if (VA_STATUS_SUCCESS == vaStatus)
++ pDisplayContext->vaDestroy(pDisplayContext);
++
+ return vaStatus;
+ }
+
--
libva packaging
More information about the pkg-multimedia-commits
mailing list