diff options
| author | Paolo Bonzini <pbonzini@redhat.com> | 2014-10-08 01:19:00 +0200 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2014-10-09 15:36:15 +0200 |
| commit | 35e4e96c4d5bfcf8a22930d8e99f7c8c44420062 (patch) | |
| tree | c5603336cb7682e5aa965e5acba854ed827b9f62 /migration-unix.c | |
| parent | cdebec5e40bd0af82da0659f37af85ee2aa2c9d1 (diff) | |
| download | focaccia-qemu-35e4e96c4d5bfcf8a22930d8e99f7c8c44420062.tar.gz focaccia-qemu-35e4e96c4d5bfcf8a22930d8e99f7c8c44420062.zip | |
virtio-scsi: fix use-after-free of VirtIOSCSIReq
scsi_req_continue can complete the request and cause the VirtIOSCSIReq to be freed. Fetch req->sreq just once to avoid the bug. Reported-by: Richard Jones <rjones@redhat.com> Tested-by: Richard Jones <rjones@redhat.com> Reviewed-by: Fam Zheng <famz@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'migration-unix.c')
0 files changed, 0 insertions, 0 deletions