[SCM] libva/master: Add upstream patch to fix use after free

sramacher at users.alioth.debian.org sramacher at users.alioth.debian.org
Tue Jun 3 12:31:55 UTC 2014


The following commit has been merged in the master branch:
commit a85f2ac64814690d585a87c46550f3a692e920b5
Author: Sebastian Ramacher <sramacher at debian.org>
Date:   Tue Jun 3 14:29:30 2014 +0200

    Add upstream patch to fix use after free
    
    Closes: #750429
    LP: #1325873

diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..067133c
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+use-after-free.patch
diff --git a/debian/patches/use-after-free.patch b/debian/patches/use-after-free.patch
new file mode 100644
index 0000000..a1ca276
--- /dev/null
+++ b/debian/patches/use-after-free.patch
@@ -0,0 +1,29 @@
+Description: release VADisplayContext at the end of vaTerminate()
+ Otherwise it will result in invalid reading in va_TraceEnd()
+Origin: upstream, http://cgit.freedesktop.org/libva/commit/?h=staging&id=d4988142a3f2256e38c5c5cdcdfc1b4f5f3c1ea9
+Bug-Debian: https://bugs.debian.org/750429
+Last-Update: 2014-06-03
+
+diff --git a/va/va.c b/va/va.c
+index 6cb17ef..0ba595b 100644
+--- a/va/va.c
++++ b/va/va.c
+@@ -515,15 +515,15 @@ VAStatus vaTerminate (
+   free(old_ctx->vtable_vpp);
+   old_ctx->vtable_vpp = NULL;
+ 
+-  if (VA_STATUS_SUCCESS == vaStatus)
+-      pDisplayContext->vaDestroy(pDisplayContext);
+-
+   VA_TRACE_LOG(va_TraceTerminate, dpy);
+ 
+   va_TraceEnd(dpy);
+ 
+   va_FoolEnd(dpy);
+ 
++  if (VA_STATUS_SUCCESS == vaStatus)
++      pDisplayContext->vaDestroy(pDisplayContext);
++
+   return vaStatus;
+ }
+ 

-- 
libva packaging



More information about the pkg-multimedia-commits mailing list