commit 869a58af86d5bb2533908dc53cc28de6e85edf38
author Marc-André Lureau <marcandre.lureau@redhat.com> Tue Feb 23 19:10:51 2016 +0100
committer Michael S. Tsirkin <mst@redhat.com> Fri Mar 11 16:59:12 2016 +0200
tree 29e0da4c2aaca91d9ca81e902e68e5d46313719e
parent b7fcb3603cd9e44d643636ad797e66f2ea9096da

qemu-char: avoid potential double-free

If tcp_set_msgfds() is called several time with NULL fds, this
could lead to double-free.

Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>

qemu-char.c

diff --git a/qemu-char.c b/qemu-char.c
index e0147f3..fc4611d 100644
--- a/qemu-char.c
+++ b/qemu-char.c
@@ -2697,6 +2697,7 @@
     }
     /* clear old pending fd array */
     g_free(s->write_msgfds);
+    s->write_msgfds = NULL;
 
     if (num) {
         s->write_msgfds = g_new(int, num);