diff options
| author | Greg Kurz | 2017-09-12 20:48:05 +0200 |
|---|---|---|
| committer | David Gibson | 2017-09-15 02:29:48 +0200 |
| commit | d492a75cfefd9a09125ba2b007c817c1417c3820 (patch) | |
| tree | bd9059e23f6f2febf520f2de6fe70ac1936dc07b /qtest.c | |
| parent | spapr_cpu_core: cleaning up qdev_get_machine() calls (diff) | |
| download | qemu-d492a75cfefd9a09125ba2b007c817c1417c3820.tar.gz qemu-d492a75cfefd9a09125ba2b007c817c1417c3820.tar.xz qemu-d492a75cfefd9a09125ba2b007c817c1417c3820.zip | |
spapr_events: use QTAILQ_FOREACH_SAFE() in spapr_clear_pending_events()
QTAILQ_FOREACH_SAFE() must be used when removing the current element
inside the loop block.
This fixes a user-after-free error introduced by commit 56258174238eb
and reported by Coverity (CID 1381017).
Signed-off-by: Greg Kurz <groug@kaod.org>
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Diffstat (limited to 'qtest.c')
0 files changed, 0 insertions, 0 deletions