[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-trivial] [Qemu-devel] [PATCH 2/2] qemu queue: fix uninitialize
From: |
Andreas Färber |
Subject: |
Re: [Qemu-trivial] [Qemu-devel] [PATCH 2/2] qemu queue: fix uninitialized removals |
Date: |
Wed, 17 Oct 2012 17:00:15 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121010 Thunderbird/16.0.1 |
Tim,
Am 14.10.2012 15:08, schrieb Tim Hardeck:
> When calling QTAILQ_REMOVE or QLIST_REMOVE on an unitialized list
> QEMU segfaults.
Can this be reproduced by a user today? Or is this just fixing the case
that a developer forgot to initialize a list?
Regards,
Andreas
> Check for this case specifically on item removal.
>
> Signed-off-by: Tim Hardeck <address@hidden>
> ---
> qemu-queue.h | 8 ++++++--
> 1 file changed, 6 insertions(+), 2 deletions(-)
>
> diff --git a/qemu-queue.h b/qemu-queue.h
> index 9288cd8..47ed239 100644
> --- a/qemu-queue.h
> +++ b/qemu-queue.h
> @@ -141,7 +141,9 @@ struct {
> \
> if ((elm)->field.le_next != NULL) \
> (elm)->field.le_next->field.le_prev = \
> (elm)->field.le_prev; \
> - *(elm)->field.le_prev = (elm)->field.le_next; \
> + if ((elm)->field.le_prev != NULL) { \
> + *(elm)->field.le_prev = (elm)->field.le_next; \
> + } \
> } while (/*CONSTCOND*/0)
>
> #define QLIST_FOREACH(var, head, field) \
> @@ -381,7 +383,9 @@ struct {
> \
> (elm)->field.tqe_prev; \
> else \
> (head)->tqh_last = (elm)->field.tqe_prev; \
> - *(elm)->field.tqe_prev = (elm)->field.tqe_next; \
> + if ((elm)->field.tqe_prev != NULL) { \
> + *(elm)->field.tqe_prev = (elm)->field.tqe_next; \
> + } \
> } while (/*CONSTCOND*/0)
>
> #define QTAILQ_FOREACH(var, head, field) \
--
SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany
GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer; HRB 16746 AG Nürnberg
- Re: [Qemu-trivial] [Qemu-devel] [PATCH 2/2] qemu queue: fix uninitialized removals,
Andreas Färber <=