From 56e8a5f11688a19f784a712ed0c3d32b8ce947d9 Mon Sep 17 00:00:00 2001
From: Max Kellermann <max.kellermann@gmail.com>
Date: Wed, 26 Feb 2020 10:46:09 +0100
Subject: [PATCH] main: destroy event_registry after iosource_mgr

Fixes use-after-free bugs because PcapSource::Close() queues an event.
---
 src/main.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/main.cc b/src/main.cc
index e8f414fe32..b47d2fcf59 100644
--- a/src/main.cc
+++ b/src/main.cc
@@ -298,11 +298,11 @@ void terminate_bro()
 	plugin_mgr->FinishPlugins();
 
 	delete zeekygen_mgr;
-	delete event_registry;
 	delete analyzer_mgr;
 	delete file_mgr;
 	// broker_mgr, timer_mgr, and supervisor are deleted via iosource_mgr
 	delete iosource_mgr;
+	delete event_registry;
 	delete log_mgr;
 	delete reporter;
 	delete plugin_mgr;