Re: [Qemu-devel] [PATCH] block/qcow2-snapshot: Fix a null pointer dereference in qcow2_free_snapshots

2017-08-10 Thread Kevin Wolf
Am 10.08.2017 um 09:52 hat Hu Chaojian geschrieben: > From: chaojianhu > > In function qcow2_do_open, if "go fail;" before calling qcow2_read_snapshots, > then snapshots > will always be NULL. When dealing with "fail:", qcow2_free_snapshots will be > called, and > s->snapshots will be derefer

[Qemu-devel] [PATCH] block/qcow2-snapshot: Fix a null pointer dereference in qcow2_free_snapshots

2017-08-10 Thread Hu Chaojian
From: chaojianhu In function qcow2_do_open, if "go fail;" before calling qcow2_read_snapshots, then snapshots will always be NULL. When dealing with "fail:", qcow2_free_snapshots will be called, and s->snapshots will be dereferenced without checked. Reported-by: chaojianhu Signed-off-by: ch