Use after free in SDL_JoystickUpdate

[SDLBugzilla]

This bug report was migrated from our old Bugzilla tracker.

These attachments are available in the static archive:

• Fix use after free (use_after_free.patch, text/plain, 2019-10-21 11:11:52 +0000, 771 bytes)

Reported in version: 2.0.10
Reported for operating system, platform: All, All

Comments on the original bug report:

On 2019-10-21 11:11:52 +0000, Mathieu Eyraud wrote:

Created attachment 3992
Fix use after free

For loop in SDL_JoystickUpdate uses 'joystick->next' while 'joystick' was potentially freed by SDL_JoystickClose.

On 2019-10-23 06:51:32 +0000, Sylvain wrote:

Thanks ! also in : https://hg.libsdl.org/SDL/rev/78b50cbc7a3b