From: Wayne Davison <wayned@samba.org>
Date: Tue, 21 Aug 2007 05:04:02 +0000 (+0000)
Subject: In pool_free_old(), one code path was not clearing a "next" pointer,
X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/commitdiff_plain/65a22a5ff70d95bbcb04f8c1dcae3eb1ca784282

In pool_free_old(), one code path was not clearing a "next" pointer,
so the code could try to free an extent twice in certain circumstances.
---

diff --git a/lib/pool_alloc.c b/lib/pool_alloc.c
index e1ce50b3..0fb31225 100644
--- a/lib/pool_alloc.c
+++ b/lib/pool_alloc.c
@@ -255,6 +255,7 @@ pool_free_old(alloc_pool_t p, void *addr)
 				cur->free -= skew;
 			}
 			next = cur->next;
+			cur->next = NULL;
 		}
 	} else {
 		next = cur->next;