| commit | f20e6f8cd42acae9a130b9e0bcd47b0d7e39f253 | |
| author | Li Qiang <liq3ea@gmail.com> | |
| Tue, 21 Feb 2017 08:18:27 +0000 (21 00:18 -0800) | ||
| committer | Paolo Bonzini <pbonzini@redhat.com> | |
| Fri, 3 Mar 2017 15:40:03 +0000 (3 16:40 +0100) | ||
| tree | ee1f1744072b9b2ec31789c265970d137c6b3ffc | treesnapshot (tar.gz zip) |
| parent | f6f99b48087696812241d6c54f97444de6364c24 | commitdiff |
spice-char: fix segfault in char_spice_finalize
In 'qemu_chr_open_spice_vmc' if the 'psubtype' is NULL, it will
call 'char_spice_finalize'. But as the SpiceChardev is not inserted
in the 'spice_chars' list, the 'QLIST_REMOVE' will cause a segfault.
Add a detect to avoid it.
Signed-off-by: Li Qiang <liqiang6-s@360.cn>
Message-Id: <1487665107-88004-1-git-send-email-liqiang6-s@360.cn>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Li Qiang <liq3ea@gmail.com>
In 'qemu_chr_open_spice_vmc' if the 'psubtype' is NULL, it will
call 'char_spice_finalize'. But as the SpiceChardev is not inserted
in the 'spice_chars' list, the 'QLIST_REMOVE' will cause a segfault.
Add a detect to avoid it.
Signed-off-by: Li Qiang <liqiang6-s@360.cn>
Message-Id: <1487665107-88004-1-git-send-email-liqiang6-s@360.cn>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Li Qiang <liq3ea@gmail.com>
| spice-qemu-char.c | diffblobblamehistory |