qemu-irix/hw
Jason Wang b28d7b585a virtio-net: fix unmap leak
virtio_net_handle_ctrl() and other functions that process control vq
request call iov_discard_front() which will shorten the iov. This will
lead unmapping in virtqueue_push() leaks mapping.

Fixes this by keeping the original iov untouched and using a temp variable
in those functions.

Cc: Wen Congyang <wency@cn.fujitsu.com>
Cc: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Jason Wang <jasowang@redhat.com>
Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
Reviewed-by: Fam Zheng <famz@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Message-id: 1417082643-23907-1-git-send-email-jasowang@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
(cherry picked from commit 771b6ed37e)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
2015-01-07 14:58:53 -06:00
..
9pfs virtio-9p: use virtio wrappers to access headers 2014-06-29 19:39:43 +03:00
acpi pcihp: fix possible array out of bounds 2014-09-08 11:23:05 -05:00
alpha machine: Conversion of QEMUMachineInitArgs to MachineState 2014-05-28 17:35:01 +02:00
arm hw/core/loader: implement address translation in uimage loader 2015-01-06 18:39:10 -06:00
audio audio: fmopl: drop INLINE macro 2014-06-23 11:01:24 -04:00
block virtio-blk: fix reference a pointer which might be freed 2014-09-08 11:23:04 -05:00
bt
char cadence_uart: check for serial backend before using it. 2014-07-17 16:36:17 +01:00
core hw/core/loader: implement address translation in uimage loader 2015-01-06 18:39:10 -06:00
cpu
cris machine: Conversion of QEMUMachineInitArgs to MachineState 2014-05-28 17:35:01 +02:00
display vmware-vga: use vmsvga_verify_rect in vmsvga_fill_rect 2015-01-06 17:41:34 -06:00
dma hw: Fix qemu_allocate_irqs() leaks 2014-06-30 21:13:30 +02:00
gpio savevm: Remove all the unneeded version_minimum_id_old (arm) 2014-05-13 16:09:35 +01:00
i2c savevm: Remove all the unneeded version_minimum_id_old (rest) 2014-05-14 15:24:51 +02:00
i386 pc: Fix disabling of vapic for compat PC models 2015-01-06 16:06:25 -06:00
ide hw/ide/core.c: Prevent SIGSEGV during migration 2015-01-07 14:57:45 -06:00
input input: fix jumpy mouse cursor with USB mouse emulation 2014-07-01 13:26:37 +02:00
intc xics: Implement xics_ics_free() 2014-06-27 13:48:26 +02:00
ipack irq: Allocate IRQs individually 2014-07-01 04:02:53 +02:00
isa acpi: implement ospm_status() method for PIIX4/ICH9_LPC devices 2014-06-19 18:44:22 +03:00
lm32 machine: Conversion of QEMUMachineInitArgs to MachineState 2014-05-28 17:35:01 +02:00
m68k hw/core/loader: implement address translation in uimage loader 2015-01-06 18:39:10 -06:00
mem pc-dimm: Don't check dimm->node when there is non-NUMA config 2015-01-06 15:49:49 -06:00
microblaze hw/core/loader: implement address translation in uimage loader 2015-01-06 18:39:10 -06:00
mips mips_malta: Catch kernels linked at wrong address 2014-07-09 18:17:08 +02:00
misc ivshmem: Fix fd leak on error 2015-01-06 15:43:56 -06:00
moxie hw/moxie/moxiesim.c: Remove unused moxie_intc_create() 2014-06-24 20:01:24 +04:00
net virtio-net: fix unmap leak 2015-01-07 14:58:53 -06:00
nvram spapr: Fix RTAS token numbers 2014-06-27 13:48:22 +02:00
openrisc hw/core/loader: implement address translation in uimage loader 2015-01-06 18:39:10 -06:00
pci pci: Use bus master address space for delivering MSI/MSI-X messages 2014-12-24 16:08:15 -06:00
pci-bridge hw/pcie: implement power controller functionality 2014-06-23 17:48:42 +03:00
pci-host prep: Remove PCI memory hack related to OpenHack'Ware 2014-07-07 16:46:35 +02:00
pcmcia hw: Fix qemu_allocate_irqs() leaks 2014-06-30 21:13:30 +02:00
ppc hw/ppc/spapr_pci.c: Avoid functions not in glib 2.12 (g_hash_table_iter_*) 2015-01-07 14:18:31 -06:00
s390x virtio-balloon: fix virtio-balloon child refcount in transports 2015-01-06 16:03:19 -06:00
scsi virtio-scsi: work around bug in old BIOSes 2015-01-07 14:43:28 -06:00
sd hw: Fix qemu_allocate_irqs() leaks 2014-06-30 21:13:30 +02:00
sh4 hw: Fix qemu_allocate_irqs() leaks 2014-06-30 21:13:30 +02:00
sparc tcx: move initialisation from realizefn to initfn 2014-06-05 20:51:57 +01:00
sparc64 machine: Conversion of QEMUMachineInitArgs to MachineState 2014-05-28 17:35:01 +02:00
ssi ssi: Name the CS GPIO 2014-05-28 17:36:21 +02:00
timer mc146818rtc: register the clock reset notifier on the right clock 2014-07-10 17:06:33 +02:00
tpm
unicore32 machine: Conversion of QEMUMachineInitArgs to MachineState 2014-05-28 17:35:01 +02:00
usb xhci PCIe endpoint migration compatibility fix 2014-12-24 15:45:02 -06:00
virtio virtio-9p: fix virtio-9p child refcount in transports 2015-01-06 16:03:37 -06:00
watchdog watchdog: fix deadlock with -watchdog-action pause 2014-07-09 18:17:08 +02:00
xen xen_backend: introduce xenstore_read_uint64 and xenstore_read_fe_uint64 2014-07-07 10:37:40 +00:00
xenpv machine: Conversion of QEMUMachineInitArgs to MachineState 2014-05-28 17:35:01 +02:00
xtensa hw/xtensa/xtfpga: treat uImage load address as virtual 2015-01-06 18:39:24 -06:00
Makefile.objs pc: implement pc-dimm device abstraction 2014-06-19 16:41:47 +03:00