[PATCH 6/6] rtworkq: Fix reference leak when canceling waiting work items.
Derek Lesho
dlesho at codeweavers.com
Tue Jan 4 11:35:27 CST 2022
A waiting work_item has two references, the initial reference from creation, and an additional reference associated with its presence pending_items list, freed through queue_release_pending_item. RtwqCancelWorkItem only releases the second reference.
Signed-off-by: Derek Lesho <dlesho at codeweavers.com>
---
dlls/rtworkq/queue.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/dlls/rtworkq/queue.c b/dlls/rtworkq/queue.c
index 58769a0be04..f77f2a602ca 100644
--- a/dlls/rtworkq/queue.c
+++ b/dlls/rtworkq/queue.c
@@ -866,6 +866,7 @@ static HRESULT queue_cancel_item(struct queue *queue, RTWQWORKITEM_KEY key)
if (item->key == key)
{
key >>= 32;
+ queue_release_pending_item(item);
if ((key & WAIT_ITEM_KEY_MASK) == WAIT_ITEM_KEY_MASK)
{
IRtwqAsyncResult_SetStatus(item->result, RTWQ_E_OPERATION_CANCELLED);
@@ -876,7 +877,7 @@ static HRESULT queue_cancel_item(struct queue *queue, RTWQWORKITEM_KEY key)
CloseThreadpoolTimer(item->u.timer_object);
else
WARN("Unknown item key mask %#x.\n", (DWORD)key);
- queue_release_pending_item(item);
+ IUnknown_Release(&item->IUnknown_iface);
hr = S_OK;
break;
}
--
2.33.1
More information about the wine-devel
mailing list