device: 0.680
graphic: 0.582
performance: 0.525
semantic: 0.454
network: 0.417
socket: 0.325
PID: 0.313
vnc: 0.296
permissions: 0.210
debug: 0.208
files: 0.131
boot: 0.104
other: 0.079
KVM: 0.073

SDL2 UI sends a NULL to sdl_grab_start if fullscreen, which crashes

in ui/sdl2.c:

    if (full_screen) {
        gui_fullscreen = 1;
        sdl_grab_start(0);
    }

Is sent, but no null checks are made in sdl_grab_start (its assumed to be an allocated pointer). So a crash happens if you start qemu -full-screen.

It should at lease send the first [0] of the newly allocated sdl2_console through.

Quickly looking around should look something like:

    if (full_screen) {
        gui_fullscreen = 1;
        sdl_grab_start(&sdl2_console[0]);
    }

The NULL pointer check has been added here:
http://git.qemu.org/?p=qemu.git;a=commitdiff;h=f2335791fd0ceb2f9e3