aboutsummaryrefslogtreecommitdiff
path: root/version.rc
diff options
context:
space:
mode:
authorEric Auger <eric.auger@redhat.com>2023-02-28 10:29:44 +0100
committerMichael Tokarev <mjt@tls.msk.ru>2024-03-01 22:06:10 +0300
commit73bf928177b6e3c894de9fe3796161219a4e1412 (patch)
treea9fcd2d20b2ac9a50611e35b8f5aa0ee4abaded4 /version.rc
parent72e2a246385c0162df948824f1cc19e0b37548e9 (diff)
test-vmstate: fix bad GTree usage, use-after-free
According to g_tree_foreach() documentation: "The tree may not be modified while iterating over it (you can't add/remove items)." compare_trees()/diff_tree() fail to respect this rule. Historically GLib2 used a slice allocator for the GTree APIs which did not immediately release the memory back to the system allocator. As a result QEMU's use-after-free bug was not visible. With GLib > 2.75.3 however, GLib2 has switched to using malloc and now a SIGSEGV can be observed while running test-vmstate. Get rid of the node removal within the tree traversal. Also check the trees have the same number of nodes before the actual diff. Fixes: 9a85e4b8f6 ("migration: Support gtree migration") Resolves: https://gitlab.com/qemu-project/qemu/-/issues/1518 Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com> Signed-off-by: Eric Auger <eric.auger@redhat.com> Reported-by: Richard W.M. Jones <rjones@redhat.com> Tested-by: Richard W.M. Jones <rjones@redhat.com> Reviewed-by: Richard W.M. Jones <rjones@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Reviewed-by: Juan Quintela <quintela@redhat.com> Signed-off-by: Juan Quintela <quintela@redhat.com> (cherry picked from commit abe2c4bdb65e8dd9cb2f01c355baa394bf49a8af) Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
Diffstat (limited to 'version.rc')
0 files changed, 0 insertions, 0 deletions