From 0ca75b02350522bedb7b98ab679be9e3851cca76 Mon Sep 17 00:00:00 2001 From: Yonit Halperin Date: Mon, 19 Nov 2012 17:22:51 -0500 Subject: char_device.c: when the state is destroyed, also free the buffer that is being written to the device --- server/char_device.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/char_device.c b/server/char_device.c index d7f5360a..1d5bed92 100644 --- a/server/char_device.c +++ b/server/char_device.c @@ -689,6 +689,9 @@ void spice_char_device_state_destroy(SpiceCharDeviceState *char_dev) core->timer_remove(char_dev->write_to_dev_timer); write_buffers_queue_free(&char_dev->write_queue); write_buffers_queue_free(&char_dev->write_bufs_pool); + if (char_dev->cur_write_buf) { + spice_char_device_write_buffer_free(char_dev->cur_write_buf); + } while (!ring_is_empty(&char_dev->clients)) { RingItem *item = ring_get_tail(&char_dev->clients); -- cgit