We are currently migrating Bugzilla to GitHub issues.
Any changes made to the bug tracker now will be lost, so please do not post new bugs or make changes to them.
When we're done, all bug URLs will redirect to their equivalent location on the new bug tracker.

Bug 4837

Summary: Use after free in SDL_SensorUpdate
Product: SDL Reporter: Mathieu Eyraud <meyraud705>
Component: joystickAssignee: Sam Lantinga <slouken>
Status: RESOLVED FIXED QA Contact: Sam Lantinga <slouken>
Severity: normal    
Priority: P2 CC: sylvain.becker
Version: 2.0.10   
Hardware: All   
OS: All   
Attachments: fix_use_after_free

Description Mathieu Eyraud 2019-10-21 11:07:30 UTC 
Created attachment 3991 [details]
fix_use_after_free

For loop in SDL_SensorUpdate uses 'sensor->next' while 'sensor' was potentially freed by SDL_SensorClose.
Comment 1 Sylvain 2019-10-23 06:47:54 UTC 
Thanks this is in!
https://hg.libsdl.org/SDL/rev/7c541486c67a