|
| From: | Vladimir Sementsov-Ogievskiy |
| Subject: | [PATCH v6 3/5] migration: process_incoming_migration_co(): fix reporting s->error |
| Date: | Tue, 30 Apr 2024 11:56:44 +0300 |
It's bad idea to leave critical section with error object freed, but
s->error still set, this theoretically may lead to use-after-free
crash. Let's avoid it.
Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@yandex-team.ru>
---
migration/migration.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/migration/migration.c b/migration/migration.c
index 0d26db47f7..b307a4bc59 100644
--- a/migration/migration.c
+++ b/migration/migration.c
@@ -784,6 +784,7 @@ process_incoming_migration_co(void *opaque)
if (migrate_has_error(s)) {
WITH_QEMU_LOCK_GUARD(&s->error_mutex) {
error_report_err(s->error);
+ s->error = NULL;
}
}
error_report("load of migration failed: %s", strerror(-ret));
--
2.34.1
| [Prev in Thread] | Current Thread | [Next in Thread] |