summaryrefslogtreecommitdiff
path: root/external/mdds/use-after-free.patch
blob: 981c945821a7caeed788dce7742e1f210cf25900 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
--- include/mdds/flat_segment_tree_def.inl
+++ include/mdds/flat_segment_tree_def.inl
@@ -84,8 +84,8 @@
         // Move on to the next destination node, and have the next node point
         // back to the previous node.
         node_ptr old_node = dest_node;
+        dest_node->next->prev = old_node;
         dest_node = dest_node->next;
-        dest_node->prev = old_node;
 
         if (src_node == r.m_right_leaf.get())
         {