[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-block] [PATCH v4 19/37] rbd: Fix use after free in qemu_rbd_set_ke
From: |
Kevin Wolf |
Subject: |
[Qemu-block] [PATCH v4 19/37] rbd: Fix use after free in qemu_rbd_set_keypairs() error path |
Date: |
Wed, 7 Mar 2018 19:59:28 +0100 |
If we want to include the invalid option name in the error message, we
can't free the string earlier than that.
Cc: address@hidden
Signed-off-by: Kevin Wolf <address@hidden>
Reviewed-by: Max Reitz <address@hidden>
Reviewed-by: Eric Blake <address@hidden>
---
block/rbd.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/block/rbd.c b/block/rbd.c
index c1275c1ec9..c1025c8493 100644
--- a/block/rbd.c
+++ b/block/rbd.c
@@ -268,13 +268,14 @@ static int qemu_rbd_set_keypairs(rados_t cluster, const
char *keypairs_json,
key = qstring_get_str(name);
ret = rados_conf_set(cluster, key, qstring_get_str(value));
- QDECREF(name);
QDECREF(value);
if (ret < 0) {
error_setg_errno(errp, -ret, "invalid conf option %s", key);
+ QDECREF(name);
ret = -EINVAL;
break;
}
+ QDECREF(name);
}
QDECREF(keypairs);
--
2.13.6
- [Qemu-block] [PATCH v4 09/37] util: Add qemu_opts_to_qdict_filtered(), (continued)
- [Qemu-block] [PATCH v4 09/37] util: Add qemu_opts_to_qdict_filtered(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 11/37] test-qemu-opts: Test qemu_opts_to_qdict_filtered(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 06/37] qcow2: Use BlockdevRef in qcow2_co_create(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 10/37] test-qemu-opts: Test qemu_opts_append(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 12/37] qdict: Introduce qdict_rename_keys(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 14/37] block: Make bdrv_is_whitelisted() public, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 13/37] qcow2: Use visitor for options in qcow2_create(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 15/37] block: x-blockdev-create QMP command, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 16/37] file-posix: Support .bdrv_co_create, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 18/37] gluster: Support .bdrv_co_create, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 19/37] rbd: Fix use after free in qemu_rbd_set_keypairs() error path,
Kevin Wolf <=
- [Qemu-block] [PATCH v4 17/37] file-win32: Support .bdrv_co_create, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 20/37] rbd: Factor out qemu_rbd_connect(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 21/37] rbd: Remove non-schema options from runtime_opts, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 24/37] rbd: Assign s->snap/image_name in qemu_rbd_open(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 22/37] rbd: Pass BlockdevOptionsRbd to qemu_rbd_connect(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 25/37] rbd: Use qemu_rbd_connect() in qemu_rbd_do_create(), Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 23/37] rbd: Support .bdrv_co_create, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 27/37] nfs: Support .bdrv_co_create, Kevin Wolf, 2018/03/07
- [Qemu-block] [PATCH v4 26/37] nfs: Use QAPI options in nfs_client_open(), Kevin Wolf, 2018/03/07