bus_driver_handle_become_monitor: Don't leak zero-length array of rules

Only privileged users can trigger this leak, so it is not a denial of
service attack.

Signed-off-by: Simon McVittie <smcv@collabora.com>

diff --git a/bus/driver.c b/bus/driver.c
index 8015f28ba7d1b3013fd2129283a042cf884f4f4c..9b3e43eeb5d99a595749367f4061119015a959d6 100644 (file)
--- a/bus/driver.c
+++ b/bus/driver.c
@@ -2258,6 +2258,7 @@ bus_driver_handle_become_monitor (DBusConnection *connection,
   /* Special case: a zero-length array becomes [""] */
   if (n_match_rules == 0)
     {
+      dbus_free (match_rules);
       match_rules = dbus_malloc (2 * sizeof (char *));
 
       if (match_rules == NULL)