From: Paolo Bonzini <pbonzini@redhat.com>
To: qemu-devel@nongnu.org
Cc: "Marc-André Lureau" <marcandre.lureau@redhat.com>
Subject: [Qemu-devel] [PULL 17/52] vl: fix direct firmware directories leak
Date: Fri, 12 Jan 2018 12:30:41 +0100 [thread overview]
Message-ID: <1515756676-3860-18-git-send-email-pbonzini@redhat.com> (raw)
In-Reply-To: <1515756676-3860-1-git-send-email-pbonzini@redhat.com>
From: Marc-André Lureau <marcandre.lureau@redhat.com>
Note that data_dir[] will now point to allocated strings.
Fixes:
Direct leak of 16 byte(s) in 1 object(s) allocated from:
#0 0x7f1448181850 in malloc (/lib64/libasan.so.4+0xde850)
#1 0x7f1446ed8f0c in g_malloc ../glib/gmem.c:94
#2 0x7f1446ed91cf in g_malloc_n ../glib/gmem.c:331
#3 0x7f1446ef739a in g_strsplit ../glib/gstrfuncs.c:2364
#4 0x55cf276439d7 in main /home/elmarco/src/qq/vl.c:4311
#5 0x7f143dfad039 in __libc_start_main (/lib64/libc.so.6+0x21039)
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Message-Id: <20180104160523.22995-10-marcandre.lureau@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
---
vl.c | 9 ++++++---
1 file changed, 6 insertions(+), 3 deletions(-)
diff --git a/vl.c b/vl.c
index 444b750..3599485 100644
--- a/vl.c
+++ b/vl.c
@@ -2318,7 +2318,7 @@ static void qemu_add_data_dir(const char *path)
return; /* duplicate */
}
}
- data_dir[data_dir_idx++] = path;
+ data_dir[data_dir_idx++] = g_strdup(path);
}
static inline bool nonempty_str(const char *str)
@@ -3078,7 +3078,7 @@ int main(int argc, char **argv, char **envp)
Error *main_loop_err = NULL;
Error *err = NULL;
bool list_data_dirs = false;
- char **dirs;
+ char *dir, **dirs;
typedef struct BlockdevOptions_queue {
BlockdevOptions *bdo;
Location loc;
@@ -4181,9 +4181,12 @@ int main(int argc, char **argv, char **envp)
for (i = 0; dirs[i] != NULL; i++) {
qemu_add_data_dir(dirs[i]);
}
+ g_strfreev(dirs);
/* try to find datadir relative to the executable path */
- qemu_add_data_dir(os_find_datadir());
+ dir = os_find_datadir();
+ qemu_add_data_dir(dir);
+ g_free(dir);
/* add the datadir specified when building */
qemu_add_data_dir(CONFIG_QEMU_DATADIR);
--
1.8.3.1
next prev parent reply other threads:[~2018-01-12 11:31 UTC|newest]
Thread overview: 59+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-01-12 11:30 [Qemu-devel] [PULL 00/52] Misc patches for 2017-01-12 Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 01/52] scsi-generic: Add share-rw option Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 02/52] scsi: fix scsi_convert_sense crash when in_buf == NULL && in_len == 0 Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 03/52] pc: fail memory hot-plug/unplug with -no-acpi and Q35 machine type Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 04/52] hpet: recover timer offset correctly Paolo Bonzini
2018-01-12 11:47 ` Pavel Dovgalyuk
2018-01-12 12:08 ` Paolo Bonzini
2018-01-12 12:18 ` Pavel Dovgalyuk
2018-01-12 12:21 ` Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 05/52] i386/cpu/kvm: look at PMU's CPUID before setting MSRs Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 06/52] chardev: use backend chr context when watch for fe Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 07/52] chardev: let g_idle_add() be with chardev gcontext Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 08/52] chardev: introduce qemu_chr_timeout_add_ms() Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 09/52] build-sys: fix qemu-ga -pthread linking Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 10/52] build-sys: silence make by default or V=0 Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 11/52] build-sys: add a rule to print a variable Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 12/52] build-sys: compile with -Og or -O1 when --enable-debug Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 13/52] tests/docker: add some sanitizers to fedora dockerfile Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 14/52] tests/docker: add test-debug Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 15/52] build-sys: add some sanitizers when --enable-debug if possible Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 16/52] tests: fix check-qobject leak Paolo Bonzini
2018-01-12 11:30 ` Paolo Bonzini [this message]
2018-01-12 11:30 ` [Qemu-devel] [PULL 18/52] readline: add a free function Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 19/52] tests: fix migration-test leak Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 20/52] crypto: fix stack-buffer-overflow error Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 21/52] qemu-config: fix leak in query-command-line-options Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 22/52] tests: fix qmp-test leak Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 23/52] ucontext: annotate coroutine stack for ASAN Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 24/52] tests: fix coroutine leak in /basic/entered Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 25/52] mips: fix potential fopen(NULL,...) Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 26/52] disas/s390: fix global-buffer-overflow Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 27/52] scsi-disk: release AioContext in unaligned WRITE SAME case Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 28/52] tests/boot-serial-test: Add tests for microblaze boards Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 29/52] tests/boot-serial-test: Add a test for the moxiesim machine Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 30/52] tests/boot-serial-test: Add support for the raspi2 machine Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 31/52] target/i386: move hflags update code to a function Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 32/52] target/i386: hax: change to use x86_update_hflags Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 33/52] target/i386: hax: Move x86_update_hflags Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 34/52] target-i386: update hflags on Hypervisor.framework Paolo Bonzini
2018-01-12 11:30 ` [Qemu-devel] [PULL 35/52] scripts/qemu-gdb: add simple tcg lock status helper Paolo Bonzini
2018-01-12 12:37 ` Alex Bennée
2018-01-12 11:31 ` [Qemu-devel] [PULL 36/52] scripts/qemu-gdb/timers.py: new helper to dump timer state Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 37/52] icount: fixed saving/restoring of icount warp timers Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 38/52] cpus: unify qemu_*_wait_io_event Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 39/52] irq: fix memory leak Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 40/52] net: Drop unusual use of do { } while (0); Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 41/52] mips: Tweak location of ';' in macros Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 42/52] chardev: Use goto/label instead of do/break/while(0) Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 43/52] chardev: Clean up previous patch indentation Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 44/52] tests: Avoid 'do/while(false); ' in vhost-user-bridge Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 45/52] maint: Fix macros with broken 'do/while(0); ' usage Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 46/52] checkpatch: Enforce proper do/while (0) style Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 47/52] find_ram_offset: Add comments and tracing Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 48/52] find_ram_offset: Align ram_addr_t allocation on long boundaries Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 49/52] block/iscsi: fix initialization of iTask in iscsi_co_get_block_status Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 50/52] cpu: flush TB cache when loading VMState Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 51/52] util/qemu-thread-*: add qemu_lock, locked and unlock trace events Paolo Bonzini
2018-01-12 11:31 ` [Qemu-devel] [PULL 52/52] scripts/analyse-locks-simpletrace.py: script to analyse lock times Paolo Bonzini
2018-01-12 18:38 ` Eric Blake
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1515756676-3860-18-git-send-email-pbonzini@redhat.com \
--to=pbonzini@redhat.com \
--cc=marcandre.lureau@redhat.com \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).