commit 4231c88d27d9e46e6ad6e6b7bbb6e442bcf9cd05
author Paolo Bonzini <pbonzini@redhat.com> Wed Sep 26 15:21:36 2012 +0200
committer Paolo Bonzini <pbonzini@redhat.com> Tue Oct 30 09:30:53 2012 +0100
tree d6c97afb6796e405da1f4afec3a51689afbd2dad
parent a915f4bc977c4f3aab08a78023c1303664d1c606

aio: test node->deleted before calling io_flush

Otherwise, there could be a case where io_flush accesses freed
memory because it should not have been called.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

aio.c

diff --git a/aio.c b/aio.c
index c89f1e9..734d2cf 100644
--- a/aio.c
+++ b/aio.c
@@ -122,7 +122,7 @@
          * Otherwise, if there are no AIO requests, qemu_aio_wait() would
          * wait indefinitely.
          */
-        if (node->io_flush) {
+        if (!node->deleted && node->io_flush) {
             if (node->io_flush(node->opaque) == 0) {
                 continue;
             }