From: Kevin Wolf Date: Tue, 11 Apr 2017 14:08:53 +0000 (+0200) Subject: sheepdog: Fix crash in co_read_response() X-Git-Tag: v2.9.0-rc4~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5eceb01adfbe513c0309528293b0b86e32a6e27d;p=thirdparty%2Fqemu.git sheepdog: Fix crash in co_read_response() This fixes a regression introduced in commit 9d456654. aio_co_wake() can only be used to reenter a coroutine that was already previously entered, otherwise co->ctx is uninitialised and we access garbage. Using it immediately after qemu_coroutine_create() like in co_read_response() is wrong and causes segfaults. Replace the call with aio_co_enter(), which gets an explicit AioContext parameter and works even for new coroutines. Signed-off-by: Kevin Wolf Tested-by: Kashyap Chamarthy Reviewed-by: Max Reitz Message-id: 1491919733-21065-1-git-send-email-kwolf@redhat.com Signed-off-by: Peter Maydell --- diff --git a/block/sheepdog.c b/block/sheepdog.c index 14d63272093..fb9203e9be3 100644 --- a/block/sheepdog.c +++ b/block/sheepdog.c @@ -942,7 +942,7 @@ static void co_read_response(void *opaque) s->co_recv = qemu_coroutine_create(aio_read_response, opaque); } - aio_co_wake(s->co_recv); + aio_co_enter(s->aio_context, s->co_recv); } static void co_write_request(void *opaque)