The function monitor_fdset_dup_fd_find_remove() references member of 'mon_fdset' which - when remove flag is set - may be freed in function monitor_fdset_cleanup(). remove is set by monitor_fdset_dup_fd_remove which in practice does not need the returned value, so make it void, and return -1 from monitor_fdset_dup_fd_find_remove. Reported-by: zhanghailiang <zhang.zhanghailiang@huawei.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Luiz Capitulino <lcapitulino@redhat.com> |
||
---|---|---|
.. | ||
arch-query-cpu-def.c | ||
bdrv-commit-all.c | ||
chr-baum-init.c | ||
chr-msmouse.c | ||
chr-testdev.c | ||
clock-warp.c | ||
cpu-get-clock.c | ||
cpu-get-icount.c | ||
cpus.c | ||
dump.c | ||
fd-register.c | ||
fdset-add-fd.c | ||
fdset-find-fd.c | ||
fdset-get-fd.c | ||
fdset-remove-fd.c | ||
gdbstub.c | ||
get-fd.c | ||
get-next-serial.c | ||
get-vm-name.c | ||
iothread-lock.c | ||
is-daemonized.c | ||
kvm.c | ||
machine-init-done.c | ||
Makefile.objs | ||
migr-blocker.c | ||
mon-is-qmp.c | ||
mon-printf.c | ||
mon-set-error.c | ||
monitor-init.c | ||
notify-event.c | ||
pci-drive-hot-add.c | ||
qemu-chr-open-spice.c | ||
qmp_pc_dimm_device_list.c | ||
qtest.c | ||
reset.c | ||
runstate-check.c | ||
set-fd-handler.c | ||
slirp.c | ||
sysbus.c | ||
uuid.c | ||
vc-init.c | ||
vm-stop.c | ||
vmstate.c |