r12782@Kushana: nickm | 2007-04-23 18:20:19 -0400

 Avoid a segfault when freeing a buffer with size 0.

svn:r10010

diff --git a/src/or/buffers.c b/src/or/buffers.c
index cf5b0bb0e9586d567c487696ebd78dc7adc1b30e..1d80f88ea4e4ec384ac5d59383cd6fd9b987c9f3 100644 (file)
--- a/src/or/buffers.c
+++ b/src/or/buffers.c
@@ -469,7 +469,7 @@ buf_free(buf_t *buf)
   buf->magic = 0xDEADBEEF;
   if (buf->len == MIN_LAZY_SHRINK_SIZE) {
     add_buf_mem_to_freelist(buf);
-  } else {
+  } else if (buf->mem) {
     oldmem = RAW_MEM(buf->mem);
     tor_free(oldmem);
   }