File 0035-chardev-baum-fix-baum-that-releases.patch of Package qemu

Overview Repositories Revisions Requests Users Attributes Meta

File 0035-chardev-baum-fix-baum-that-releases.patch of Package qemu (Revision bfe2ee3b5b005eaf3c89364ef0e45830)

Currently displaying revision bfe2ee3b5b005eaf3c89364ef0e45830 , Show latest

From d131e1cccb06a09c867752ac4b9a075f4c97ffbc Mon Sep 17 00:00:00 2001
From: Liang Yan <lyan@suse.com>
Date: Fri, 22 Sep 2017 18:55:33 -0400
Subject: [PATCH] chardev/baum: fix baum that releases brlapi twice
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Error process of baum_chr_open needs to set brlapi null, so it won't
get released twice in char_braille_finalize, which will cause
"/usr/bin/qemu-system-x86_64: double free or corruption (!prev)"

Signed-off-by: Liang Yan <lyan@suse.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
(cherry picked from commit 98e8790326d732fc79f0c133d9658f4761ba9cb7)
[LY: BSC#1060045]
Signed-off-by: Liang Yan <lyan@suse.com>
---
 chardev/baum.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/chardev/baum.c b/chardev/baum.c
index 302dd9666c..67fd783a59 100644
--- a/chardev/baum.c
+++ b/chardev/baum.c
@@ -643,6 +643,7 @@ static void baum_chr_open(Chardev *chr,
         error_setg(errp, "brlapi__openConnection: %s",
                    brlapi_strerror(brlapi_error_location()));
         g_free(handle);
+        baum->brlapi = NULL;
         return;
     }
     baum->deferred_init = 0;

Places

File 0035-chardev-baum-fix-baum-that-releases.patch of Package qemu (Revision bfe2ee3b5b005eaf3c89364ef0e45830)

Places