From c9a51ecd4c35c9fe7bcf83a943d2f6875313454e Mon Sep 17 00:00:00 2001
From: Garrett D'Amore <garrett@damore.org>
Date: Sun, 23 Apr 2023 17:57:10 -0700
Subject: fixes #1658 Possible use-after-free in dialer

---
 src/core/dialer.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'src/core/dialer.c')

diff --git a/src/core/dialer.c b/src/core/dialer.c
index 443571bc..7dd018f6 100644
--- a/src/core/dialer.c
+++ b/src/core/dialer.c
@@ -322,6 +322,7 @@ nni_dialer_rele(nni_dialer *d)
 	bool reap;
 
 	nni_mtx_lock(&dialers_lk);
+	NNI_ASSERT(d->d_ref > 0);
 	d->d_ref--;
 	reap = ((d->d_ref == 0) && (d->d_closed));
 	nni_mtx_unlock(&dialers_lk);
@@ -346,6 +347,7 @@ nni_dialer_close(nni_dialer *d)
 
 	nni_dialer_shutdown(d);
 
+	nni_sock_remove_dialer(d);
 	nni_dialer_rele(d);
 }
 
-- 
cgit v1.2.3-70-g09d2