Michael Tokarev <[email protected]> writes:

> On 11/28/25 18:20, Markus Armbruster wrote:
>> These functions wrap ioctl().  When ioctl() fails, it sets @errno.
>> The wrappers then return that @errno negated.
>>
>> Except they call accel_ioctl_end() between calling ioctl() and reading
>> @errno.  accel_ioctl_end() can clobber @errno, e.g. when a futex()
>> system call fails.  Seems unlikely, but it's a bug all the same.
>>
>> Fix by retrieving @errno before calling accel_ioctl_end().
>>
>> Fixes: a27dd2de68f3 (KVM: keep track of running ioctls)
>> Signed-off-by: Markus Armbruster <[email protected]>
>> Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
>
> Isn't this a qemu-stable material?

I think it is.  I should've thought of adding Cc: qemu-stable.  My
apologies!


Reply via email to