Don't access freed memory.

Signed-off-by: Matt Colyer <matt@colyer.name>

1 files changed, 3 insertions, 1 deletions

diff --git a/src/AFC.c b/src/AFC.c
index f4b802d..5462dfc 100644
--- a/src/AFC.c
+++ b/src/AFC.c
@@ -121,6 +121,7 @@ int receive_AFC_data(AFClient *client, char **dump_here) {
 	AFCPacket *r_packet;
 	char *buffer = (char*)malloc(sizeof(AFCPacket) * 4);
 	int bytes = 0, recv_len = 0;
+        int retval = 0;
 	
 	bytes = mux_recv(client->phone, client->connection, buffer, sizeof(AFCPacket) * 4);
 	if (bytes <= 0) {
@@ -136,9 +137,10 @@ int receive_AFC_data(AFClient *client, char **dump_here) {
 	if (r_packet->entire_length == r_packet->this_length && r_packet->entire_length > sizeof(AFCPacket) && r_packet->operation != AFC_ERROR) {
 		*dump_here = (char*)malloc(sizeof(char) * (r_packet->entire_length-sizeof(AFCPacket)));
 		memcpy(*dump_here, buffer+sizeof(AFCPacket), r_packet->entire_length-sizeof(AFCPacket));
+                retval = r_packet->entire_length - sizeof(AFCPacket);
 		free(buffer);
 		free(r_packet);
-		return r_packet->entire_length - sizeof(AFCPacket);
+		return retval;
 	}
 	
 	uint32 param1 = buffer[sizeof(AFCPacket)];