[libvirt] [PATCH] snapshot: fix snapshot deletion

Michal Privoznik mprivozn at redhat.com
Wed Feb 15 09:41:34 UTC 2012


On 14.02.2012 21:48, Eric Blake wrote:
> Bug introduced in commit 35abced.  On an inactive domain,
> $ virsh snapshot-create-as dom snap
> $ virsh snapshot-create dom
> $ virsh snapshot-create dom
> $ virsh snapshot-delete --children dom snap
> could crash libvirtd, due to a use-after-free that results
> when the callback freed the current element in the iteration.
> 
> * src/conf/domain_conf.c (virDomainSnapshotForEachChild)
> (virDomainSnapshotActOnDescendant): Allow iteration to delete
> current child.
> ---
>  src/conf/domain_conf.c |    5 +++--
>  1 files changed, 3 insertions(+), 2 deletions(-)
> 

ACK




More information about the libvir-list mailing list