From 717805f5707295a8b873fac48bbc37f154f78e0e Mon Sep 17 00:00:00 2001
From: Craig Tiller <craig.tiller@gmail.com>
Date: Tue, 10 Nov 2015 08:45:17 +0000
Subject: [PATCH] Fix use-after-free

---
 src/core/transport/chttp2/hpack_table.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/core/transport/chttp2/hpack_table.c b/src/core/transport/chttp2/hpack_table.c
index fde74b3acd4..be18be748ce 100644
--- a/src/core/transport/chttp2/hpack_table.c
+++ b/src/core/transport/chttp2/hpack_table.c
@@ -240,6 +240,7 @@ static void rebuild_ents(grpc_chttp2_hptbl *tbl, gpr_uint32 new_cap) {
     ents[i] = tbl->ents[(tbl->first_ent + i) % tbl->cap_entries];
   }
   gpr_free(tbl->ents);
+  tbl->ents = ents;
   tbl->cap_entries = new_cap;
   tbl->first_ent = 0;
 }