From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:50364) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XFIg3-00014n-7j for qemu-devel@nongnu.org; Thu, 07 Aug 2014 04:04:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XFIft-0004xj-L8 for qemu-devel@nongnu.org; Thu, 07 Aug 2014 04:03:59 -0400 Received: from szxga02-in.huawei.com ([119.145.14.65]:5786) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XFIfs-0004x0-TM for qemu-devel@nongnu.org; Thu, 07 Aug 2014 04:03:49 -0400 From: zhanghailiang Date: Thu, 7 Aug 2014 16:01:42 +0800 Message-ID: <1407398512-20780-1-git-send-email-zhang.zhanghailiang@huawei.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit Subject: [Qemu-devel] [PATCH v3 00/10] fix three bugs about use-after-free and several api abuse List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: kwolf@redhat.com, lkurusa@redhat.com, zhanghailiang , mst@redhat.com, jan.kiszka@siemens.com, riku.voipio@iki.fi, mjt@tls.msk.ru, peter.huangpeng@huawei.com, lcapitulino@redhat.com, stefanha@redhat.com, luonengjun@huawei.com, pbonzini@redhat.com, alex.bennee@linaro.org, rth@twiddle.net Hi, Besides fstat(), I have also found when call malloc() and fopen(), there are serveral places that do not check their return value. Though it is a small probability for the two functions to fail, but it is better to fix them. So i added these patches to this patch-set v2 -> v3: -ivshmem: change the error message which advised by Levente Kurusa -others: add six new patches which check the return value of malloc() and fopen(), - which may be failed. v1 -> v2: -ivshmem: modified the log message according to reviewing suggestion of Michael Li Liu (3): tcg: check return value of fopen() block/vvfat: fix setbuf stream parameter may be NULL qtest: check the value returned by fopen() zhanghailiang (7): l2cap: fix access freed memory monitor: fix access freed memory virtio-blk: fix reference a pointer which might be freed ivshmem: check the value returned by fstat() util/path: check return value of malloc() slirp: check return value of malloc() linux-user: check return value of malloc() block/vvfat.c | 5 ++++- hw/block/virtio-blk.c | 5 +++-- hw/bt/l2cap.c | 2 +- hw/misc/ivshmem.c | 6 +++++- linux-user/syscall.c | 3 +++ monitor.c | 4 +++- qtest.c | 5 +++++ slirp/misc.c | 8 ++++++-- tcg/tcg.c | 4 ++++ tests/bios-tables-test.c | 2 ++ util/path.c | 9 ++++++--- 11 files changed, 42 insertions(+), 11 deletions(-) -- 1.7.12.4