diff options
| author | Yunjian Wang <wangyunjian@huawei.com> | 2017-04-26 14:45:56 +0800 |
|---|---|---|
| committer | Jason Wang <jasowang@redhat.com> | 2017-05-23 10:10:38 +0800 |
| commit | f989c30cf834ba8625e98b808eac30e4e7ec5008 (patch) | |
| tree | f9a8debf2839b06da475bdf72993dd13304c763b /cpu-exec-common.c | |
| parent | f5ab20a4682959f06efe0787950a6c48a3e6f8fa (diff) | |
| download | qemu-f989c30cf834ba8625e98b808eac30e4e7ec5008.zip qemu-f989c30cf834ba8625e98b808eac30e4e7ec5008.tar.gz qemu-f989c30cf834ba8625e98b808eac30e4e7ec5008.tar.bz2 | |
virtio-net: fix wild pointer when remove virtio-net queues
The tx_bh or tx_timer will free in virtio_net_del_queue() function, when
removing virtio-net queues if the guest doesn't support multiqueue. But
it might be still referenced by virtio_net_set_status(), which needs to
be set NULL. And also the tx_waiting needs to be set zero to prevent
virtio_net_set_status() accessing tx_bh or tx_timer.
Cc: qemu-stable@nongnu.org
Signed-off-by: Yunjian Wang <wangyunjian@huawei.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'cpu-exec-common.c')
0 files changed, 0 insertions, 0 deletions