[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] monitor: Fix Resource leak
From: |
Gonglei |
Subject: |
Re: [Qemu-devel] [PATCH] monitor: Fix Resource leak |
Date: |
Thu, 12 Feb 2015 09:04:29 +0800 |
User-agent: |
Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 |
On 2015/2/11 21:00, Markus Armbruster wrote:
> <address@hidden> writes:
>
>> From: Gonglei <address@hidden>
>>
>> Coverity spot:
>> qemu_using_spice allocates memory that is stored into err,
>> but not freed before return.
>>
>> Cc:Markus Armbruster <address@hidden>
>> Signed-off-by: Gonglei <address@hidden>
>> ---
>> monitor.c | 3 ++-
>> 1 file changed, 2 insertions(+), 1 deletion(-)
>>
>> diff --git a/monitor.c b/monitor.c
>> index c3cc060..137d23f 100644
>> --- a/monitor.c
>> +++ b/monitor.c
>> @@ -1095,12 +1095,13 @@ static int client_migrate_info(Monitor *mon, const
>> QDict *qdict,
>> const char *subject = qdict_get_try_str(qdict, "cert-subject");
>> int port = qdict_get_try_int(qdict, "port", -1);
>> int tls_port = qdict_get_try_int(qdict, "tls-port", -1);
>> - Error *err;
>> + Error *err = NULL;
>> int ret;
>>
>> if (strcmp(protocol, "spice") == 0) {
>> if (!qemu_using_spice(&err)) {
>> qerror_report_err(err);
>> + error_free(err);
>> return -1;
>> }
>
> Your commit message is incomplete. The resource leak is real, but it's
> the less serious bug here. The serious one is missing initialization of
> err.
>
> If using_spice, qemu_using_spice() returns true without touching err.
> All fine.
>
> Else, if err is null by chance, qemu_using_spice()'s error_set() creates
> an error object and stores it in err. We leak it.
>
> If err is not null, error_set() fails its assertion.
>
Thanks for your explanation, I haven't a global inspection TBH.
> Broken in commit b25d81b by yours truly. Thanks for cleaning up my
> mess!
>
> Let's fix up the commit message:
>
> monitor: Fix missing err = NULL in client_migrate_info()
>
> When SPICE isn't used, we either fail an assertion in error_set(),
> or leak an error object. Broken in commit b25d81b.
>
OK, will fix.
> With such a fixup:
>
> Reviewed-by: Markus Armbruster <address@hidden>
>
Thanks.
Regards,
-Gonglei