qemu-stable
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-stable] [PATCH 1/2] commit: Fix use after free in completion


From: Kevin Wolf
Subject: Re: [Qemu-stable] [PATCH 1/2] commit: Fix use after free in completion
Date: Fri, 9 Jun 2017 13:45:47 +0200
User-agent: Mutt/1.5.21 (2010-09-15)

Am 02.06.2017 um 23:12 hat Kevin Wolf geschrieben:
> The final bdrv_set_backing_hd() could be working on already freed nodes
> because the commit job drops its references (through BlockBackends) to
> both overlay_bs and top already a bit earlier.
> 
> One way to trigger the bug is hot unplugging a disk for which
> blockdev_mark_auto_del() cancels the block job.
> 
> Fix this by taking BDS-level references while we're still using the
> nodes.
> 
> Signed-off-by: Kevin Wolf <address@hidden>

Cc: address@hidden



reply via email to

[Prev in Thread] Current Thread [Next in Thread]