[Bug 28746] New: use-after-free in acmDriverClose?

http://bugs.winehq.org/show_bug.cgi?id=28746

Bug #: 28746
           Summary: use-after-free in acmDriverClose?
           Product: Wine
           Version: 1.3.30
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: msacm32
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

valgrind complains:

Invalid read of size 4
   at MSACM_GetObj (internal.c:821)
   by MSACM_GetDriver (internal.c:839)
   by acmDriverClose (driver.c:195)
   by DriverEnumProc (msacm.c:374)
   by acmDriverEnum (driver.c:345)
   by func_msacm (msacm.c:485)
   by run_test (test.h:556)
   by main (test.h:624)
 Address 0x7f230a08 is 0 bytes inside a block of size 20 free'd
   at notify_free (heap.c:262)
   by RtlFreeHeap (heap.c:1748)
   by acmDriverClose (driver.c:218)
   by DriverEnumProc (msacm.c:368)
   by acmDriverEnum (driver.c:345)
   by func_msacm (msacm.c:485)
   by run_test (test.h:556)
   by main (test.h:624)

[Bug 28746] use-after-free in acmDriverClose?

http://bugs.winehq.org/show_bug.cgi?id=28746

Dan Kegel  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE

--- Comment #1 from Dan Kegel  2011-10-16 04:19:52 CDT ---
dup of 26121

*** This bug has been marked as a duplicate of bug 26121 ***

[Bug 28746] use-after-free in acmDriverClose?

http://bugs.winehq.org/show_bug.cgi?id=28746

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Austin English  2011-10-17 16:06:27 CDT ---
Closing.