summaryrefslogtreecommitdiffstats
path: root/include/exec
diff options
context:
space:
mode:
authorManos Pitsidianakis2017-07-14 16:35:47 +0200
committerKevin Wolf2017-08-01 18:09:33 +0200
commit998cbd6a44cd96044f56713274bdf6a94cd721c0 (patch)
tree99a0ad9848071b96050e36914d96ac6570ab4958 /include/exec
parentiotests: Add test of recent fix to 'qemu-img measure' (diff)
downloadqemu-998cbd6a44cd96044f56713274bdf6a94cd721c0.tar.gz
qemu-998cbd6a44cd96044f56713274bdf6a94cd721c0.tar.xz
qemu-998cbd6a44cd96044f56713274bdf6a94cd721c0.zip
block: fix dangling bs->explicit_options in block.c
In some error paths it is possible to QDECREF a freed dangling explicit_options, resulting in a heap overflow crash. For example bdrv_open_inherit()'s fail unrefs it, then calls bdrv_unref which calls bdrv_close which also unrefs it. Signed-off-by: Manos Pitsidianakis <el13635@mail.ntua.gr> Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Diffstat (limited to 'include/exec')
0 files changed, 0 insertions, 0 deletions