Samuel Thibault
ea64d5f088
slirp: Fix access to freed memory
...
if_start() goes through the slirp->if_fastq and slirp->if_batchq
list of pending messages, and accesses ifm->ifq_so->so_nqueued of its
elements if ifm->ifq_so != NULL. When freeing a socket, we thus need
to make sure that any pending message for this socket does not refer
to the socket any more.
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
Tested-by: Brian Candler <b.candler@pobox.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
2016-11-14 17:36:33 +01:00
..
2016-02-04 17:41:30 +00:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:19:16 +02:00
2009-01-26 19:37:41 +00:00
2009-06-29 08:52:46 -05:00
2016-07-03 23:59:42 +02:00
2016-07-03 23:59:42 +02:00
2016-06-07 18:19:25 +03:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-07-03 23:31:12 +02:00
2016-07-12 16:19:16 +02:00
2016-04-01 17:51:55 +02:00
2016-03-15 10:35:00 +01:00
2016-07-12 16:20:46 +02:00
2016-04-28 18:12:08 +01:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:20:46 +02:00
2016-07-03 23:59:42 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-03-15 10:35:00 +01:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-05-16 20:58:47 +02:00
2016-09-13 19:09:42 +02:00
2016-08-16 12:17:36 +01:00
2016-11-14 17:36:33 +01:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:20:46 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00
2016-07-03 23:59:42 +02:00
2016-07-12 16:19:16 +02:00
2016-07-12 16:20:46 +02:00