diff options
author | phk <phk@FreeBSD.org> | 2003-12-12 12:17:28 +0000 |
---|---|---|
committer | phk <phk@FreeBSD.org> | 2003-12-12 12:17:28 +0000 |
commit | c4ec3e17f9723070066fdafd1e78ef5c06528ff9 (patch) | |
tree | 04507ee4e57e9f26ee5f238690bfbd970822822e /sys/dev/led/led.c | |
parent | ef6b8673419b72c67d48ffba916d2a59e1bb7cf0 (diff) | |
download | FreeBSD-src-c4ec3e17f9723070066fdafd1e78ef5c06528ff9.zip FreeBSD-src-c4ec3e17f9723070066fdafd1e78ef5c06528ff9.tar.gz |
DUH!
Write 100 times for tomorrow:
I will never again free(9) a modified pointer.
Pointy Hat: yeah, yeah, yeah, can you just put it in the pile over there...
Diffstat (limited to 'sys/dev/led/led.c')
-rw-r--r-- | sys/dev/led/led.c | 26 |
1 files changed, 16 insertions, 10 deletions
diff --git a/sys/dev/led/led.c b/sys/dev/led/led.c index 8299eb8..b2e44e9 100644 --- a/sys/dev/led/led.c +++ b/sys/dev/led/led.c @@ -52,9 +52,13 @@ led_timeout(void *p) sc->count--; continue; } - sc->func(sc->private, sc->ptr[0] >= 'a' ? 0 : 1); - sc->count = sc->ptr[0] & 0xf; - if (*(++sc->ptr) == '\0') + if (*sc->ptr >= 'a' && *sc->ptr <= 'j') + sc->func(sc->private, 0); + else if (*sc->ptr >= 'A' && *sc->ptr <= 'J') + sc->func(sc->private, 1); + sc->count = *sc->ptr & 0xf; + sc->ptr++; + if (*sc->ptr == '\0') sc->ptr = sc->str; } mtx_unlock(&led_mtx); @@ -66,7 +70,7 @@ static int led_write(dev_t dev, struct uio *uio, int ioflag) { int error; - char *s; + char *s, *s2; struct ledsc *sc; struct sbuf *sb; struct sbuf *sb2; @@ -76,13 +80,13 @@ led_write(dev_t dev, struct uio *uio, int ioflag) if (uio->uio_resid > 512) return (EINVAL); - s = malloc(uio->uio_resid + 1, M_DEVBUF, M_WAITOK); + s2 = s = malloc(uio->uio_resid + 1, M_DEVBUF, M_WAITOK); if (s == NULL) return (ENOMEM); s[uio->uio_resid] = '\0'; error = uiomove(s, uio->uio_resid, uio); if (error) { - free(s, M_DEVBUF); + free(s2, M_DEVBUF); return (error); } @@ -101,13 +105,13 @@ led_write(dev_t dev, struct uio *uio, int ioflag) mtx_unlock(&led_mtx); if (sb2 != NULL) sbuf_delete(sb2); - free(s, M_DEVBUF); + free(s2, M_DEVBUF); return(0); } sb = sbuf_new(NULL, NULL, 0, SBUF_AUTOEXTEND); if (sb == NULL) { - free(s, M_DEVBUF); + free(s2, M_DEVBUF); return (ENOMEM); } @@ -179,10 +183,12 @@ led_write(dev_t dev, struct uio *uio, int ioflag) sbuf_cat(sb, "j"); break; default: - break; + sbuf_delete(sb); + free(s2, M_DEVBUF); + return (EINVAL); } sbuf_finish(sb); - free(s, M_DEVBUF); + free(s2, M_DEVBUF); if (sbuf_overflowed(sb)) { sbuf_delete(sb); return (ENOMEM); |