[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-trivial] [PATCH v6 02/10] monitor: fix access freed memory
From: |
zhanghailiang |
Subject: |
[Qemu-trivial] [PATCH v6 02/10] monitor: fix access freed memory |
Date: |
Thu, 14 Aug 2014 15:29:13 +0800 |
The function monitor_fdset_dup_fd_find_remove() references member of 'mon_fdset'
which may be freed in function monitor_fdset_cleanup()
Reviewed-by: Gonglei <address@hidden>
Signed-off-by: zhanghailiang <address@hidden>
---
monitor.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/monitor.c b/monitor.c
index cdbaa60..42ba1b6 100644
--- a/monitor.c
+++ b/monitor.c
@@ -2533,8 +2533,10 @@ static int monitor_fdset_dup_fd_find_remove(int dup_fd,
bool remove)
{
MonFdset *mon_fdset;
MonFdsetFd *mon_fdset_fd_dup;
+ int64_t id = -1;
QLIST_FOREACH(mon_fdset, &mon_fdsets, next) {
+ id = mon_fdset->id;
QLIST_FOREACH(mon_fdset_fd_dup, &mon_fdset->dup_fds, next) {
if (mon_fdset_fd_dup->fd == dup_fd) {
if (remove) {
@@ -2543,7 +2545,7 @@ static int monitor_fdset_dup_fd_find_remove(int dup_fd,
bool remove)
monitor_fdset_cleanup(mon_fdset);
}
}
- return mon_fdset->id;
+ return id;
}
}
}
--
1.7.12.4
- [Qemu-trivial] [PATCH v6 03/10] virtio-blk: fix reference a pointer which might be freed, (continued)
[Qemu-trivial] [PATCH v6 08/10] tests/bios-tables-test: check the value returned by fopen(), zhanghailiang, 2014/08/14
[Qemu-trivial] [PATCH v6 02/10] monitor: fix access freed memory,
zhanghailiang <=
[Qemu-trivial] [PATCH v6 10/10] block/vvfat: fix setbuf stream parameter may be NULL, zhanghailiang, 2014/08/14
[Qemu-trivial] [PATCH v6 01/10] l2cap: fix access freed memory, zhanghailiang, 2014/08/14