[libvirt] [PATCH] Avoid use-after-free on streams, due to message callbacks

Eric Blake eblake at redhat.com
Wed Aug 31 17:02:18 UTC 2011


On 08/31/2011 10:48 AM, Daniel P. Berrange wrote:
> From: "Daniel P. Berrange"<berrange at redhat.com>
>
> When sending outbound stream RPC messages, a callback is
> used to re-enable stream data transmission. If the stream
> aborts while one of these messages is outstanding, the
> stream may have been free'd by the time it is invoked. This
> results in a use-after-free error
>
> * daemon/stream.c: Ref-count streams to avoid use-after-free
> ---
>   daemon/stream.c |   10 +++++++++-
>   1 files changed, 9 insertions(+), 1 deletions(-)

ACK.

-- 
Eric Blake   eblake at redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org




More information about the libvir-list mailing list