Re: [Qemu-devel] [PATCH v3] make check-unit: use after free in test-opts-visitor

[Markus Armbruster]

Andrey Shinkevich <address@hidden> writes:

> In the struct OptsVisitor, the 'repeated_opts' member points to a list
> in the 'unprocessed_opts' hash table after the list has been destroyed.
> A subsequent call to visit_type_int() references the deleted list.
> It results in use-after-free issue reproduced by running the test case
> under the Valgrind: valgrind tests/test-opts-visitor.
> A new mode ListMode::LM_TRAVERSED is declared to mark the list
> traversal completed.
>
> Suggested-by: Markus Armbruster <address@hidden>
> Signed-off-by: Andrey Shinkevich <address@hidden>

Reviewed-by: Markus Armbruster <address@hidden>

Queued.  Thanks!