]> xenbits.xensource.com Git - qemu-xen.git/commit
projects / qemu-xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3b2fced) | patch
spapr_events: use QTAILQ_FOREACH_SAFE() in spapr_clear_pending_events()
authorGreg Kurz <groug@kaod.org>
Tue, 12 Sep 2017 18:48:05 +0000 (20:48 +0200)
committerDavid Gibson <david@gibson.dropbear.id.au>
Fri, 15 Sep 2017 00:29:48 +0000 (10:29 +1000)
commitd492a75cfefd9a09125ba2b007c817c1417c3820
treebd9059e23f6f2febf520f2de6fe70ac1936dc07btree
parent3b2fcedd52986db92fd17127c73d9c09d4ae2da1commit | diff
spapr_events: use QTAILQ_FOREACH_SAFE() in spapr_clear_pending_events()

QTAILQ_FOREACH_SAFE() must be used when removing the current element
inside the loop block.

This fixes a user-after-free error introduced by commit 56258174238eb
and reported by Coverity (CID 1381017).

Signed-off-by: Greg Kurz <groug@kaod.org>
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
hw/ppc/spapr_events.c diff | blob | blame | history
qemu-xen (upstream qemu) tree.