<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.5512" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN class=869544214-18012010>We've
come accross an application failure, which happens in the following
scenario:</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=869544214-18012010></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=869544214-18012010><STRONG>umad_get_ca_guid</STRONG> calls
<STRONG>umad_get_ca</STRONG>, which fails somewhere in the middle and jumps to
the label <STRONG>'free'</STRONG>.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=869544214-18012010>As far as
<STRONG>ret</STRONG> != 0, <STRONG>delete(ca)</STRONG> is
called.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=869544214-18012010>But
<STRONG>ca</STRONG> is a local variable of <SPAN
class=869544214-18012010><STRONG>umad_get_ca_guid</STRONG>
!</SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=869544214-18012010><SPAN
class=869544214-18012010><STRONG>delete</STRONG> fails, causing the application
failure.</SPAN></SPAN></FONT></DIV></BODY></HTML>