diff options
| author | Paolo Bonzini | 2017-01-02 11:03:33 +0100 |
|---|---|---|
| committer | Paolo Bonzini | 2017-01-16 17:52:34 +0100 |
| commit | 765a707000e838c30b18d712fe6cb3dd8e0435f3 (patch) | |
| tree | e8778e48e3e72b3a337ef6118c161dc0f25e7ed8 /include | |
| parent | bugfix: vm halt when in reset looping (diff) | |
| download | qemu-765a707000e838c30b18d712fe6cb3dd8e0435f3.tar.gz qemu-765a707000e838c30b18d712fe6cb3dd8e0435f3.tar.xz qemu-765a707000e838c30b18d712fe6cb3dd8e0435f3.zip | |
megasas: fix guest-triggered memory leak
If the guest sets the sglist size to a value >=2GB, megasas_handle_dcmd
will return MFI_STAT_MEMORY_NOT_AVAILABLE without freeing the memory.
Avoid this by returning only the status from map_dcmd, and loading
cmd->iov_size in the caller.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions