lib: tevent: Fix bug in poll backend - poll_event_loop_poll()
commit0cd4ddf35d1d848a66795601876f7b96da08d8b8
authorJeremy Allison <jra@samba.org>
Tue, 17 Nov 2015 18:28:50 +0000 (17 10:28 -0800)
committerKarolin Seeger <kseeger@samba.org>
Mon, 18 Apr 2016 10:58:29 +0000 (18 12:58 +0200)
treedd78aa97afa20d926b90597f4e17e48da8f816df
parent8f31190fefa9b2990bab1f3ee674b56238d7586f
lib: tevent: Fix bug in poll backend - poll_event_loop_poll()

If the (pfd->revents & POLLNVAL) case is triggered,
we do DLIST_REMOVE(ev->fd_events, fde); and then
use fde->next in the loop above.

Save off fde->next for loop interation before
this so we can't use a deleted ->next value.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11771

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 2be3dd1407eabe3df360ede2eab178848e34733c)
lib/tevent/tevent_poll.c