]> xenbits.xensource.com Git - qemu-xen-4.6-testing.git/commit
hw/msmouse.c: Fix deref_after_free and double free
authorYunlei Ding <yunlei.ding@citrix.com>
Mon, 17 Mar 2014 05:37:49 +0000 (05:37 +0000)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 16 Oct 2015 15:52:06 +0000 (16:52 +0100)
commita4d48935c97839337f6aa8b2bb944e92bb9909df
tree2f71fe9b176d91cc8125fefef43f70bdbe2d5fe2
parent9b81761be03ac017bdb1a212e4b59de545853d2f
hw/msmouse.c: Fix deref_after_free and double free

msmouse_chr_close is only pointed by chr->chr_close in qemu_chr_close
function. After calling chr->chr_close, chr will be freed. So we don't
need to free it again here.

Signed-off-by: Yunlei Ding <yunlei.ding@citrix.com>
(defect not identified by Coverity Scan)
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
hw/msmouse.c