From 82e68de68112b11d5ee815dfabf55c23769824be Mon Sep 17 00:00:00 2001
From: liuqiang <liuqiang@kylinos.cn>
Date: Fri, 22 Nov 2024 10:03:12 +0800
Subject: [PATCH] lavapipe: Resolved write to pointer after free

Write to "alloc" pointer variable after free "alloc"

Fixes: d74ea2c117f ("llvmpipe: Implement dmabuf handling")

Signed-off-by: liuqiang <liuqiang@kylinos.cn>
Reviewed-by: Erik Faye-Lund <erik.faye-lund@collabora.com>
Reviewed-by: Lucas Fryzek <lfryzek@igalia.com>
Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/32292>
---
 src/gallium/drivers/llvmpipe/lp_texture.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/gallium/drivers/llvmpipe/lp_texture.c b/src/gallium/drivers/llvmpipe/lp_texture.c
index 005a02b3367..5a4796e1c36 100644
--- a/src/gallium/drivers/llvmpipe/lp_texture.c
+++ b/src/gallium/drivers/llvmpipe/lp_texture.c
@@ -1506,6 +1506,7 @@ llvmpipe_import_memory_fd(struct pipe_screen *screen,
       if (!ret) {
          free(alloc);
          *ptr = NULL;
+         return false;
       } else {
          *ptr = (struct pipe_memory_allocation*)alloc;
       }