falso
/
qemu-irix
mirror of https://github.com/n64decomp/qemu-irix.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

l2tpv3: fix possible double free 

freeaddrinfo(result) does not assign result = NULL, after frees it.
There will be a double free when it goes error case.
It is reported by covertiy.

Reviewed-by: Gonglei <arei.gonglei@huawei.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: zhanghailiang <zhang.zhanghailiang@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
(cherry picked from commit 77374582ab)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
This commit is contained in:
zhanghailiang 2014-11-14 09:39:23 +08:00 committed by Michael Roth
parent de98dc9539
commit 05c5febf8c
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
net/l2tpv3.c
View File

@ -660,7 +660,6 @@ int net_init_l2tpv3(const NetClientOptions *opts,
if (fd == -1) { if (fd == -1) {
fd = -errno; fd = -errno;
error_report("l2tpv3_open : socket creation failed, errno = %d", -fd); error_report("l2tpv3_open : socket creation failed, errno = %d", -fd);
freeaddrinfo(result);
goto outerr; goto outerr;
} }
if (bind(fd, (struct sockaddr *) result->ai_addr, result->ai_addrlen)) { if (bind(fd, (struct sockaddr *) result->ai_addr, result->ai_addrlen)) {