From: Gerd Hoffmann <kraxel@redhat.com>
Date: Fri, 5 Oct 2018 13:46:08 +0000 (+0200)
Subject: qxl: check qxl_phys2virt return value
X-Git-Tag: qemu-xen-4.13.0-rc1~623^2~3
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=2f99f80c5dbb319bebede5f737efcb0b2253a45b;p=qemu-xen.git

qxl: check qxl_phys2virt return value

Fixes: CID 1395986
Fixes: 979f7ef8966bc4495a710ed9e4af42098f92ee79
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-id: 20181005134608.1251-1-kraxel@redhat.com
---

diff --git a/hw/display/qxl.c b/hw/display/qxl.c
index e628cf1286..f608abc769 100644
--- a/hw/display/qxl.c
+++ b/hw/display/qxl.c
@@ -290,7 +290,7 @@ static void qxl_spice_monitors_config_async(PCIQXLDevice *qxl, int replay)
     }
 
     cfg = qxl_phys2virt(qxl, qxl->guest_monitors_config, MEMSLOT_GROUP_GUEST);
-    if (cfg->count == 1) {
+    if (cfg != NULL && cfg->count == 1) {
         qxl->guest_primary.resized = 1;
         qxl->guest_head0_width  = cfg->heads[0].width;
         qxl->guest_head0_height = cfg->heads[0].height;