Anthony Liguori <[email protected]> writes:

>>From Markus:
>
> Before:
>
>     $ qemu-system-x86_64 -display none -drive if=ide
>     qemu-system-x86_64: Device needs media, but drive is empty
>     qemu-system-x86_64: Initialization of device ide-hd failed
>     [Exit 1 ]
>
> After:
>
>     $ qemu-system-x86_64 -display none -drive if=ide
>     qemu-system-x86_64: Device needs media, but drive is empty
>     Segmentation fault (core dumped)
>     [Exit 139 (SIGSEGV)]
>
> This error always existed as qdev_init() frees the object.  But QOM
> goes a bit further and purposefully sets the class pointer to NULL to
> help find use-after-free.  It worked :-)
>
> Cc: Andreas Faerber <[email protected]>
> Reported-by: Markus Armbruster <[email protected]>
> Signed-off-by: Anthony Liguori <[email protected]>

Tested-by: Markus Armbruster <[email protected]>

Reply via email to