mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

virtio-blk: fix reference a pointer which might be freed

Browse Source 
In function virtio_blk_handle_request, it may freed memory pointed by req,
So do not access member of req after calling this function.

Cc: qemu-stable@nongnu.org
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: zhanghailiang <zhang.zhanghailiang@huawei.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
This commit is contained in:
zhanghailiang 2014-08-18 15:42:50 +08:00 committed by Kevin Wolf
parent 466560b9fc
commit 1bdb176ac5
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hw/block/virtio-blk.c
View File

@ -469,8 +469,9 @@ static void virtio_blk_dma_restart_bh(void *opaque)
s->rq = NULL; s->rq = NULL;
while (req) { while (req) {
VirtIOBlockReq *next = req->next;
virtio_blk_handle_request(req, &mrb); virtio_blk_handle_request(req, &mrb);
req = req->next; req = next;
} }
virtio_submit_multiwrite(s->bs, &mrb); virtio_submit_multiwrite(s->bs, &mrb);