From: Li Qiang <liqiang6-s@360.cn>
Date: Mon, 17 Oct 2016 12:13:58 +0000 (+0200)
Subject: 9pfs: fix potential host memory leak in v9fs_read
X-Git-Tag: v2.8.0-rc0~76^2~10
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e95c9a493a5a8d6f969e86c9f19f80ffe6587e19;p=thirdparty%2Fqemu.git

9pfs: fix potential host memory leak in v9fs_read

In 9pfs read dispatch function, it doesn't free two QEMUIOVector
object thus causing potential memory leak. This patch avoid this.

Signed-off-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Greg Kurz <groug@kaod.org>
---

diff --git a/hw/9pfs/9p.c b/hw/9pfs/9p.c
index 39a7e1d52d2..ff94a6272c3 100644
--- a/hw/9pfs/9p.c
+++ b/hw/9pfs/9p.c
@@ -1826,14 +1826,15 @@ static void v9fs_read(void *opaque)
             if (len < 0) {
                 /* IO error return the error */
                 err = len;
-                goto out;
+                goto out_free_iovec;
             }
         } while (count < max_count && len > 0);
         err = pdu_marshal(pdu, offset, "d", count);
         if (err < 0) {
-            goto out;
+            goto out_free_iovec;
         }
         err += offset + count;
+out_free_iovec:
         qemu_iovec_destroy(&qiov);
         qemu_iovec_destroy(&qiov_full);
     } else if (fidp->fid_type == P9_FID_XATTR) {