tevent_poll: Avoid a crash in poll_event_set_fd_flags

The event context might have been freed before the fde Signed-off-by: Volker Lendecke <[email protected]> Reviewed-by: Stefan Metzmacher <[email protected]> Reviewed-by: Jeremy Allison <[email protected]>
Gazzonyx · Feb 3, 2013 · 1cfc76f · 1cfc76f
1 parent 611fcca
commit 1cfc76f
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/lib/tevent/tevent_poll.c b/lib/tevent/tevent_poll.c
@@ -297,11 +297,17 @@ static struct tevent_fd *poll_event_add_fd(struct tevent_context *ev,
 */
 static void poll_event_set_fd_flags(struct tevent_fd *fde, uint16_t flags)
 {
-	struct poll_event_context *poll_ev = talloc_get_type_abort(
-		fde->event_ctx->additional_data, struct poll_event_context);
+	struct tevent_context *ev = fde->event_ctx;
+	struct poll_event_context *poll_ev;
 	uint64_t idx = fde->additional_flags;
 	uint16_t pollflags;
 
+	if (ev == NULL) {
+		return;
+	}
+	poll_ev = talloc_get_type_abort(
+		ev->additional_data, struct poll_event_context);
+
 	fde->flags = flags;
 
 	if (idx == UINT64_MAX) {