XSA-188

Advisory: XSA-188

EVTCHNOP_init_control with an invalid control_gfn will correctly fail and free resources but incorrectly leaves a pointer to freed memory.

A subsequent EVTCHNOP_expand_array call (for example) will use this freed memory.

See also

tests/xsa-188/main.c