summary refs log tree commit diff stats
path: root/gitlab/issues/target_missing/host_missing/accel_missing/2311.toml
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-05-21 21:21:26 +0200
committerChristian Krinitsin <mail@krinitsin.com>2025-05-21 21:21:26 +0200
commit4b927bc37359dec23f67d3427fc982945f24f404 (patch)
tree245449ef9146942dc7fffd0235b48b7e70a00bf2 /gitlab/issues/target_missing/host_missing/accel_missing/2311.toml
parentaa8bd79cec7bf6790ddb01d156c2ef2201abbaab (diff)
downloadqemu-analysis-4b927bc37359dec23f67d3427fc982945f24f404.tar.gz
qemu-analysis-4b927bc37359dec23f67d3427fc982945f24f404.zip
add gitlab issues in toml format
Diffstat (limited to 'gitlab/issues/target_missing/host_missing/accel_missing/2311.toml')
-rw-r--r--gitlab/issues/target_missing/host_missing/accel_missing/2311.toml27
1 files changed, 27 insertions, 0 deletions
diff --git a/gitlab/issues/target_missing/host_missing/accel_missing/2311.toml b/gitlab/issues/target_missing/host_missing/accel_missing/2311.toml
new file mode 100644
index 000000000..a02b005c4
--- /dev/null
+++ b/gitlab/issues/target_missing/host_missing/accel_missing/2311.toml
@@ -0,0 +1,27 @@
+id = 2311
+title = "Possible dereference of NULL"
+state = "closed"
+created_at = "2024-04-25T14:53:39.886Z"
+closed_at = "2024-08-01T08:50:08.380Z"
+labels = ["Closed::Invalid", "Storage"]
+url = "https://gitlab.com/qemu-project/qemu/-/issues/2311"
+host-os = "n/a"
+host-arch = "n/a"
+qemu-version = "v8.0.5 and upper"
+guest-os = "n/a"
+guest-arch = "n/a"
+description = """There is possible dereference of NULL using macro QEMU_LOCK_GUARD(&q->lock) in:
+1) /block/nvme.c line [326](https://github.com/qemu/qemu/blob/5da72194df36535d773c8bdc951529ecd5e31707/block/nvme.c#L326)
+2) /include/qemu/ratelimit.h line [45](https://github.com/qemu/qemu/blob/5da72194df36535d773c8bdc951529ecd5e31707/include/qemu/ratelimit.h#L45)
+3) /include/qemu/ratelimit.h line [88](https://github.com/qemu/qemu/blob/5da72194df36535d773c8bdc951529ecd5e31707/include/qemu/ratelimit.h#L88)
+
+
+The QEMU_MAKE_LOCKABLE(x) macro provides a special case (line [71](https://github.com/qemu/qemu/blob/5da72194df36535d773c8bdc951529ecd5e31707/include/qemu/lockable.h#L71) of the lockable.h) if NULL gets into it. Then the macro will return NULL, which will get to the input of the qemu_lockable_auto_lock() function, then to the qemu_lockable_lock() function, where NULL dereference will occur (line [95](https://github.com/qemu/qemu/blob/5da72194df36535d773c8bdc951529ecd5e31707/include/qemu/lockable.h#L95)).
+
+It turns out that the NULL case is provided, but not handled properly. I think a NULL check should be added.
+
+Found by Linux Verification Center (portal.linuxtesting.ru) with SVACE.
+
+Author A. Burke."""
+reproduce = "n/a"
+additional = "n/a"