preserve-emulation/ppsspp
1
0 Fork 0
mirror of https://github.com/hrydgard/ppsspp.git synced 2026-10-20 17:59:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix a use-after-free in sceKernelTerminateDeleteThread

Browse Source
This commit is contained in:
Henrik Rydgård committed 2017-12-03 02:33:50 +01:00
1 parent 4c114c1b1a
commit d6b7cde718
1 file changed
+3 -1
Download Patch File Download Diff File Expand all files Collapse all files
Core/HLE/sceKernelThread.cpp
+3 -1
View File
@@ -2276,6 +2276,8 @@ int sceKernelTerminateDeleteThread(int threadID)
if (t)
{
bool wasStopped = t->isStopped();
uint32_t attr = t->nt.attr;
uint32_t uid = t->GetUID();
INFO_LOG(SCEKERNEL, "sceKernelTerminateDeleteThread(%i)", threadID);
error = __KernelDeleteThread(threadID, SCE_KERNEL_ERROR_THREAD_TERMINATED, "thread terminated with delete");
@@ -2283,7 +2285,7 @@ int sceKernelTerminateDeleteThread(int threadID)
if (!wasStopped) {
// Set v0 before calling the handler, or it'll get lost.
RETURN(error);
__KernelThreadTriggerEvent((t->nt.attr & PSP_THREAD_ATTR_KERNEL) != 0, t->GetUID(), THREADEVENT_EXIT);
__KernelThreadTriggerEvent((attr & PSP_THREAD_ATTR_KERNEL) != 0, uid, THREADEVENT_EXIT);
}
return error;