qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Jason Wang <jasowang@redhat.com>
To: peter.maydell@linaro.org, qemu-devel@nongnu.org
Cc: Jason Wang <jasowang@redhat.com>,
	Yang Hongyang <hongyang.yang@easystack.cn>
Subject: [Qemu-devel] [PULL 02/14] net: filter: correctly remove filter from the list during finalization
Date: Mon,  7 Mar 2016 11:12:48 +0800	[thread overview]
Message-ID: <1457320380-5111-3-git-send-email-jasowang@redhat.com> (raw)
In-Reply-To: <1457320380-5111-1-git-send-email-jasowang@redhat.com>

Qemu may crash when we want to add two filters on the same netdev but
the initialization of second fails (e.g missing parameters):

./qemu-system-x86_64 -netdev user,id=un0 \
 -object filter-buffer,id=f0,netdev=un0,interval=10 \
 -object filter-buffer,id=f1,netdev=un0
Segmentation fault (core dumped)

This is because we don't check whether or not the filter was in the
list of netdev. This patch fixes this.

Cc: Yang Hongyang <hongyang.yang@easystack.cn>
Reviewed-by: Yang Hongyang <hongyang.yang@easystack.cn>
Signed-off-by: Jason Wang <jasowang@redhat.com>
---
 net/filter.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/net/filter.c b/net/filter.c
index d2a514e..7cdbc6c 100644
--- a/net/filter.c
+++ b/net/filter.c
@@ -196,7 +196,8 @@ static void netfilter_finalize(Object *obj)
         nfc->cleanup(nf);
     }
 
-    if (nf->netdev && !QTAILQ_EMPTY(&nf->netdev->filters)) {
+    if (nf->netdev && !QTAILQ_EMPTY(&nf->netdev->filters) &&
+        nf->next.tqe_prev) {
         QTAILQ_REMOVE(&nf->netdev->filters, nf, next);
     }
     g_free(nf->netdev_id);
-- 
2.5.0

  parent reply	other threads:[~2016-03-07  3:13 UTC|newest]

Thread overview: 30+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-03-07  3:12 [Qemu-devel] [PULL 00/14] Net patches Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 01/14] net: ne2000: check ring buffer control registers Jason Wang
2016-03-07  3:12 ` Jason Wang [this message]
2016-03-07  3:12 ` [Qemu-devel] [PULL 03/14] MAINTAINERS: Add entries for include/net/ files Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 04/14] net: simplify net_init_tap_one logic Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 05/14] net/filter-mirror:Add filter-mirror Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 06/14] tests/test-filter-mirror:add filter-mirror unit test Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 07/14] net: netmap: probe netmap interface for virtio-net header Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 08/14] rocker: forbid to change world type Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 09/14] rocker: return -ENOMEM in case of some world alloc fails Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 10/14] rocker: add name field into WorldOps ale let world specify its name Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 11/14] rocker: allow user to specify rocker world by property Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 12/14] filter: Add 'status' property for filter object Jason Wang
2016-03-07  3:12 ` [Qemu-devel] [PULL 13/14] filter-buffer: Add status_changed callback processing Jason Wang
2016-03-07  3:13 ` [Qemu-devel] [PULL 14/14] net: check packet payload length Jason Wang
2016-03-08  4:51 ` [Qemu-devel] [PULL 00/14] Net patches Peter Maydell
2016-03-08  7:33   ` Jason Wang
2016-03-08  7:50     ` Wen Congyang
2016-03-08  7:56       ` Jason Wang
2016-03-08  9:06         ` Zhang Chen
2016-03-08  9:13           ` Wen Congyang
2016-03-08  9:54           ` Peter Maydell
2016-03-09  1:36             ` Wen Congyang
2016-03-09  4:26               ` Li Zhijian
2016-03-09  5:24                 ` Wen Congyang
2016-03-15  3:15                 ` Jason Wang
2016-03-10  2:28             ` Jason Wang
2016-03-10  3:51               ` Li Zhijian
2016-03-15  3:07                 ` Jason Wang
2016-03-15  3:25                   ` Li Zhijian

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1457320380-5111-3-git-send-email-jasowang@redhat.com \
    --to=jasowang@redhat.com \
    --cc=hongyang.yang@easystack.cn \
    --cc=peter.maydell@linaro.org \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).