aboutsummaryrefslogtreecommitdiff
path: root/ui/trace-events
diff options
context:
space:
mode:
authorMarkus Armbruster <armbru@redhat.com>2017-03-06 20:00:35 +0100
committerKevin Wolf <kwolf@redhat.com>2017-03-07 14:53:28 +0100
commitcbc488ee2aaad06e7ef69936788e0dbd204cf0a0 (patch)
treeaa62dd606530d1e00c3776b7ebb34f0979f4df87 /ui/trace-events
parent5fe31c25cce3b09e989e40439667cd4961aba969 (diff)
downloadqemu-cbc488ee2aaad06e7ef69936788e0dbd204cf0a0.zip
qemu-cbc488ee2aaad06e7ef69936788e0dbd204cf0a0.tar.gz
qemu-cbc488ee2aaad06e7ef69936788e0dbd204cf0a0.tar.bz2
sheepdog: Defuse time bomb in sd_open() error handling
When qemu_opts_absorb_qdict() fails, sd_open() closes stdin, because sd->fd is still zero. Fortunately, qemu_opts_absorb_qdict() can't fail, because: 1. it only fails when qemu_opt_parse() fails, and 2. the only member of runtime_opts.desc[] is a QEMU_OPT_STRING, and 3. qemu_opt_parse() can't fail for QEMU_OPT_STRING. Defuse this ticking time bomb by jumping behind the file descriptor cleanup on error. Also do that for the error paths where sd->fd is still -1. The file descriptor cleanup happens to do nothing then, but let's not rely on that here. While there, rename label out to err, because it's on the error path, not the normal path out of the function. Signed-off-by: Markus Armbruster <armbru@redhat.com> Reviewed-by: Eric Blake <eblake@redhat.com> Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Diffstat (limited to 'ui/trace-events')
0 files changed, 0 insertions, 0 deletions