[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Qemu-devel] [PULL v2 28/51] qemu-char: avoid potential double-free

From: Michael S. Tsirkin
Subject: [Qemu-devel] [PULL v2 28/51] qemu-char: avoid potential double-free
Date: Tue, 15 Mar 2016 17:01:52 +0200

From: Marc-André Lureau <address@hidden>

If tcp_set_msgfds() is called several time with NULL fds, this
could lead to double-free.

Signed-off-by: Marc-André Lureau <address@hidden>
Reviewed-by: Michael S. Tsirkin <address@hidden>
Signed-off-by: Michael S. Tsirkin <address@hidden>
 qemu-char.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/qemu-char.c b/qemu-char.c
index e0147f3..fc4611d 100644
--- a/qemu-char.c
+++ b/qemu-char.c
@@ -2697,6 +2697,7 @@ static int tcp_set_msgfds(CharDriverState *chr, int *fds, 
int num)
     /* clear old pending fd array */
+    s->write_msgfds = NULL;
     if (num) {
         s->write_msgfds = g_new(int, num);

reply via email to

[Prev in Thread] Current Thread [Next in Thread]