[GNUnet-SVN] r34698 - gnunet/src/cadet

[gnunet]

Author: grothoff
Date: 2014-12-19 22:39:11 +0100 (Fri, 19 Dec 2014)
New Revision: 34698

Modified:
   gnunet/src/cadet/gnunet-service-cadet_channel.c
Log:
-fix use after free (GCCH_destroy frees 'ch', and then ch->t dereferences it 
--- Bart, please check

Modified: gnunet/src/cadet/gnunet-service-cadet_channel.c
===================================================================
--- gnunet/src/cadet/gnunet-service-cadet_channel.c     2014-12-19 21:36:42 UTC 
(rev 34697)
+++ gnunet/src/cadet/gnunet-service-cadet_channel.c     2014-12-19 21:39:11 UTC 
(rev 34698)
@@ -1686,6 +1686,7 @@
   {
     send_destroy (ch, GNUNET_YES);
     GCCH_destroy (ch);
+    return;
   }
   /* if loopback is marked for destruction, no need to ACK to the other peer,
    * it requested the destruction and is already gone, therefore, else if.