Mercurial > pidgin.yaz
view doc/gtklog-signals.dox @ 31518:b39b6d0008c5
upnp: Asynch-ronize the callbacks from UPnP to calling code. Refs #12387
I have no idea if this will resolve the crashes, but with the help of the
packet capture, I /think/ these are correct.
Short summary: it's possible for the callback to fire (and ar be freed) before
the top-level function (purple_upnp_cancel_port_mapping) returns, even though
cancel_port_mapping returns the now-invalid ar (which may lead to a subsequent
use-after-free).
At least one call path through the code that I think leads to this (backed
up by one of the debug logs I looked at):
purple_upnp_cancel_port_mapping(...)
do_port_mapping_cb (has_control_mapping == TRUE, ar->add == FALSE)
purple_upnp_generate_action_message_and_send(..., done_port_mapping_cb, ar)
/* We fail to parse the URL (see some debug logs) */
done_port_mapping_cb
ar->cb(FALSE, cbdata)
return;
return;
return;
return ar;
...and something which calls:
do_port_mapping_cb(has_control_mapping == TRUE, ar->add == TRUE)
ar->cb(FALSE, cbdata)
g_free(ar)
return;
author | Paul Aurich <paul@darkrain42.org> |
---|---|
date | Tue, 28 Dec 2010 05:37:20 +0000 |
parents | e0613cf8c493 |
children |
line wrap: on
line source
/** @page gtklog-signals GtkLog Signals @signals @signal log-displaying @endsignals @see gtklog.h <hr> @signaldef log-displaying @signalproto void (*log_displaying)(PidginLogViewer *viewer, PurpleLog *log); @endsignalproto @signaldesc Emitted when a log is being displayed. @param viewer The log viewer @param log The log being displayed @endsignaldef */ // vim: syntax=c.doxygen tw=75 et