[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PULL 7/7] qemu/migration: fix the double free problem on f
From: |
Juan Quintela |
Subject: |
[Qemu-devel] [PULL 7/7] qemu/migration: fix the double free problem on from_src_file |
Date: |
Wed, 7 Jun 2017 11:59:26 +0200 |
From: QingFeng Hao <address@hidden>
In load_snapshot, mis->from_src_file is freed twice, the first free is by
qemu_fclose, the second is by migration_incoming_state_destroy and
it causes Illegal instruction exception. The fix is just to remove the
first free.
This problem is found by qemu-iotests case 068 since commit
"660819b migration: shut src return path unconditionally". The error is:
068 1s ... - output mismatch (see 068.out.bad)
--- tests/qemu-iotests/068.out 2017-05-06 01:00:26.417270437 +0200
+++ 068.out.bad 2017-06-03 13:59:55.360274640 +0200
@@ -6,6 +6,8 @@
QEMU X.Y.Z monitor - type 'help' for more information
(qemu) savevm 0
(qemu) quit
+./common.config: line 107: 242472 Illegal instruction (core dumped) (
if [ -n "${QEMU_NEED_PID}" ]; then
+ echo $BASHPID > "${QEMU_TEST_DIR}/qemu-${_QEMU_HANDLE}.pid";
+fi; exec "$QEMU_PROG" $QEMU_OPTIONS "$@" )
QEMU X.Y.Z monitor - type 'help' for more information
-(qemu) quit
-*** done
+(qemu) *** done
Signed-off-by: QingFeng Hao <address@hidden>
Reviewed-by: Dr. David Alan Gilbert <address@hidden>
Reviewed-by: Peter Xu <address@hidden>
Signed-off-by: Juan Quintela <address@hidden>
---
migration/savevm.c | 1 -
1 file changed, 1 deletion(-)
diff --git a/migration/savevm.c b/migration/savevm.c
index 1993ca2..745caae 100644
--- a/migration/savevm.c
+++ b/migration/savevm.c
@@ -2276,7 +2276,6 @@ int load_snapshot(const char *name, Error **errp)
aio_context_acquire(aio_context);
ret = qemu_loadvm_state(f);
- qemu_fclose(f);
aio_context_release(aio_context);
migration_incoming_state_destroy();
--
2.9.4
- [Qemu-devel] [PULL 0/7] Migration PULL requset, Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 1/7] ram: Unfold get_xbzrle_cache_stats() into populate_ram_info(), Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 2/7] ram: We only print throttling information sometimes, Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 3/7] ram: Call migration_page_queue_free() at ram_migration_cleanup(), Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 4/7] ram: Move ZERO_TARGET_PAGE inside XBZRLE, Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 6/7] ram: Make RAMState dynamic, Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 5/7] ram: Use MigrationStats for statistics, Juan Quintela, 2017/06/07
- [Qemu-devel] [PULL 7/7] qemu/migration: fix the double free problem on from_src_file,
Juan Quintela <=
- Re: [Qemu-devel] [PULL 0/7] Migration PULL requset, Peter Maydell, 2017/06/07