qemu/qapi at f24582d6ad8a080e008974c000bf0ae635d036ac - qemu

History

Laszlo Ersek f24582d6ad qapi: fix double free in qmp_output_visitor_cleanup()

Stack entries in QmpOutputVisitor are navigation links (weak references),
except the bottom (ie. least recently added) entry, which owns the root
QObject [1]. Make qmp_output_visitor_cleanup() drop the stack entries,
then release the QObject tree by the root.

Attempting to serialize an invalid enum inside a dictionary is an example
for triggering the double free.

[1] http://lists.nongnu.org/archive/html/qemu-devel/2012-03/msg03276.html

Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Signed-off-by: Luiz Capitulino <lcapitulino@redhat.com>

2012-03-27 09:11:00 -03:00

qapi-dealloc-visitor.c

qapi: dealloc visitor, support freeing of nested lists

2011-10-04 11:00:46 -03:00

qapi-dealloc-visitor.h

qapi: add QAPI dealloc visitor

2011-07-21 16:48:13 -03:00

qapi-types-core.h

qapi: add code generation support for middle mode

2011-10-04 11:00:46 -03:00

qapi-visit-core.c

qapi: allow sharing enum implementation across visitors