]> git.ipfire.org Git - thirdparty/qemu.git/commit
chardev/wctable: don't free the instance in wctablet_chr_finalize
authorDaniil Tatianin <d-tatianin@yandex-team.ru>
Wed, 17 Nov 2021 14:23:49 +0000 (17:23 +0300)
committerMichael Roth <michael.roth@amd.com>
Tue, 14 Dec 2021 20:54:14 +0000 (14:54 -0600)
commit4658dfcbc09dcc90025604cce64d6fd01952b882
treea624cb5f6d697843e1310df56ce19d540ec959ba
parent2b2eb343a01bb84a9d988158f706a65b57604d65
chardev/wctable: don't free the instance in wctablet_chr_finalize

Object is supposed to be freed by invoking obj->free, and not
obj->instance_finalize. This would lead to use-after-free followed by
double free in object_unref/object_finalize.

Signed-off-by: Daniil Tatianin <d-tatianin@yandex-team.ru>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-Id: <20211117142349.836279-1-d-tatianin@yandex-team.ru>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
(cherry picked from commit fdc6e168181d06391711171b7c409b34f2981ced)
Signed-off-by: Michael Roth <michael.roth@amd.com>
chardev/wctablet.c