diff options
| author | Dana Robinson <derobins@hdfgroup.org> | 2019-06-18 16:59:36 (GMT) |
|---|---|---|
| committer | Dana Robinson <derobins@hdfgroup.org> | 2019-06-18 16:59:36 (GMT) |
| commit | daaa56de3e2f296c2bb0262129860eda75b8ac30 (patch) | |
| tree | cd5708b18b63f57c9464a39608e14893bea3439d /src/H5Shyper.c | |
| parent | f73a190d2c2e2bfe80508599e0d76d62c358ae68 (diff) | |
| download | hdf5-daaa56de3e2f296c2bb0262129860eda75b8ac30.zip hdf5-daaa56de3e2f296c2bb0262129860eda75b8ac30.tar.gz hdf5-daaa56de3e2f296c2bb0262129860eda75b8ac30.tar.bz2 | |
Fixed a memory bug where a pointer is used after it's been freed.
This is going to need a release note when it's moved to 1.10.
Diffstat (limited to 'src/H5Shyper.c')
| -rw-r--r-- | src/H5Shyper.c | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/src/H5Shyper.c b/src/H5Shyper.c index 63f457b..6d54f97 100644 --- a/src/H5Shyper.c +++ b/src/H5Shyper.c @@ -11306,11 +11306,11 @@ H5S__hyper_get_clip_diminfo(hsize_t start, hsize_t stride, hsize_t *count, herr_t H5S_hyper_clip_unlim(H5S_t *space, hsize_t clip_size) { - H5S_hyper_sel_t *hslab; /* Convenience pointer to hyperslab info */ - hsize_t orig_count; /* Original count in unlimited dimension */ - int orig_unlim_dim; /* Original unliminted dimension */ - H5S_hyper_dim_t *diminfo; /* Convenience pointer to diminfo.opt in unlimited dimension */ - herr_t ret_value = SUCCEED; /* Return value */ + H5S_hyper_sel_t *hslab = NULL; /* Convenience pointer to hyperslab info */ + hsize_t orig_count; /* Original count in unlimited dimension */ + int orig_unlim_dim; /* Original unliminted dimension */ + H5S_hyper_dim_t *diminfo; /* Convenience pointer to diminfo.opt in unlimited dimension */ + herr_t ret_value = SUCCEED; /* Return value */ FUNC_ENTER_NOAPI(FAIL) @@ -11341,6 +11341,9 @@ H5S_hyper_clip_unlim(H5S_t *space, hsize_t clip_size) /* Convert to "none" selection */ if(H5S_select_none(space) < 0) HGOTO_ERROR(H5E_DATASPACE, H5E_CANTDELETE, FAIL, "can't convert selection") + + /* Reset the convenience pointer */ + hslab = NULL; } /* end if */ /* Check for single block in unlimited dimension */ else if(orig_count == (hsize_t)1) { @@ -11393,7 +11396,7 @@ H5S_hyper_clip_unlim(H5S_t *space, hsize_t clip_size) } /* end else */ /* Update the upper bound, if the diminfo is valid */ - if(H5S_DIMINFO_VALID_YES == hslab->diminfo_valid) + if(hslab && (H5S_DIMINFO_VALID_YES == hslab->diminfo_valid)) hslab->diminfo.high_bounds[orig_unlim_dim] = hslab->diminfo.opt[orig_unlim_dim].start + hslab->diminfo.opt[orig_unlim_dim].stride * (hslab->diminfo.opt[orig_unlim_dim].count - 1) + |