diff options
| author | Marc-André Lureau <marcandre.lureau@redhat.com> | 2016-03-29 13:20:51 +0200 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2016-04-05 11:46:52 +0200 |
| commit | 85bc2a15121e8bcd9f15eb75794a1eacca9d84bd (patch) | |
| tree | 7ef035448b904af678ccda3436a1692bc4fd8b26 /exec.c | |
| parent | 1b0d9b05d45af1d38a1b354a57d7cd16775fee87 (diff) | |
| download | focaccia-qemu-85bc2a15121e8bcd9f15eb75794a1eacca9d84bd.tar.gz focaccia-qemu-85bc2a15121e8bcd9f15eb75794a1eacca9d84bd.zip | |
memory: fix segv on qemu_ram_free(block=0x0)
Since f1060c55bf1377b4, the pointer is directly passed to qemu_ram_free(). However, on initialization failure, it may be called with a NULL pointer. Return immediately in this case. This fixes a SEGV when memory initialization failed, for example permission denied on open backing store /dev/hugepages, with -object memory-backend-file,mem-path=/dev/hugepages. Program received signal SIGSEGV, Segmentation fault. 0x00005555556e67e7 in qemu_ram_free (block=0x0) at /home/elmarco/src/qemu/exec.c:1775 Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com> Message-Id: <1459250451-29984-1-git-send-email-marcandre.lureau@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to '')
| -rw-r--r-- | exec.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/exec.c b/exec.c index f46e596818..c4f9036184 100644 --- a/exec.c +++ b/exec.c @@ -1773,6 +1773,10 @@ static void reclaim_ramblock(RAMBlock *block) void qemu_ram_free(RAMBlock *block) { + if (!block) { + return; + } + qemu_mutex_lock_ramlist(); QLIST_REMOVE_RCU(block, next); ram_list.mru_block = NULL; |