qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Nicholas Piggin <npiggin@gmail.com>
To: qemu-devel@nongnu.org
Cc: "Nicholas Piggin" <npiggin@gmail.com>,
	"Pavel Dovgalyuk" <Pavel.Dovgalyuk@ispras.ru>,
	"Philippe Mathieu-Daudé" <philmd@linaro.org>,
	"Richard Henderson" <richard.henderson@linaro.org>,
	"Alex Bennée" <alex.bennee@linaro.org>,
	"Paolo Bonzini" <pbonzini@redhat.com>,
	"John Snow" <jsnow@redhat.com>, "Cleber Rosa" <crosa@redhat.com>,
	"Wainer dos Santos Moschetta" <wainersm@redhat.com>,
	"Beraldo Leal" <bleal@redhat.com>,
	"Michael Tokarev" <mjt@tls.msk.ru>
Subject: [PATCH v6 10/10] savevm: Fix load_snapshot error path crash
Date: Tue, 13 Aug 2024 15:06:37 +1000	[thread overview]
Message-ID: <20240813050638.446172-11-npiggin@gmail.com> (raw)
In-Reply-To: <20240813050638.446172-1-npiggin@gmail.com>

An error path missed setting *errp, which can cause a NULL deref.

Reviewed-by: Alex Bennée <alex.bennee@linaro.org>
Signed-off-by: Nicholas Piggin <npiggin@gmail.com>
---
 migration/savevm.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/migration/savevm.c b/migration/savevm.c
index 85958d7b09..6bb404b9c8 100644
--- a/migration/savevm.c
+++ b/migration/savevm.c
@@ -3288,6 +3288,7 @@ bool load_snapshot(const char *name, const char *vmstate,
     /* Don't even try to load empty VM states */
     ret = bdrv_snapshot_find(bs_vm_state, &sn, name);
     if (ret < 0) {
+        error_setg(errp, "Snapshot can not be found");
         return false;
     } else if (sn.vm_state_size == 0) {
         error_setg(errp, "This is a disk-only snapshot. Revert to it "
-- 
2.45.2



  parent reply	other threads:[~2024-08-13  5:08 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-08-13  5:06 [PATCH v6 00/10] replay: fixes and new test cases Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 01/10] scripts/replay-dump.py: Update to current rr record format Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 02/10] scripts/replay-dump.py: rejig decoders in event number order Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 03/10] tests/avocado: excercise scripts/replay-dump.py in replay tests Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 04/10] replay: allow runstate shutdown->running when replaying trace Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 05/10] Revert "replay: stop us hanging in rr_wait_io_event" Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 06/10] tests/avocado: replay_kernel.py add x86-64 q35 machine test Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 07/10] chardev: set record/replay on the base device of a muxed device Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 08/10] virtio-net: Use replay_schedule_bh_event for bhs that affect machine state Nicholas Piggin
2024-08-13  5:06 ` [PATCH v6 09/10] virtio-net: Use virtual time for RSC timers Nicholas Piggin
2024-08-13  5:06 ` Nicholas Piggin [this message]
2024-08-13 14:12 ` [PATCH v6 00/10] replay: fixes and new test cases Alex Bennée

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20240813050638.446172-11-npiggin@gmail.com \
    --to=npiggin@gmail.com \
    --cc=Pavel.Dovgalyuk@ispras.ru \
    --cc=alex.bennee@linaro.org \
    --cc=bleal@redhat.com \
    --cc=crosa@redhat.com \
    --cc=jsnow@redhat.com \
    --cc=mjt@tls.msk.ru \
    --cc=pbonzini@redhat.com \
    --cc=philmd@linaro.org \
    --cc=qemu-devel@nongnu.org \
    --cc=richard.henderson@linaro.org \
    --cc=wainersm@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).