qemu/hw/scsi
Fam Zheng 2cbe2de545 virtio-scsi: Unset hotplug handler when unrealize
This matches the qbus_set_hotplug_handler in realize, and it releases
the final reference to the embedded VirtIODevice so that it is
properly finalized.

A use-after-free is fixed with this patch, indirectly:
virtio_device_instance_finalize wasn't called at hot-unplug, and the
vdev->listener would be a dangling pointer in the global and the per
address space listener list. See also RHBZ 1449031.

Cc: qemu-stable@nongnu.org
Signed-off-by: Fam Zheng <famz@redhat.com>
Message-Id: <20170518102808.30046-1-famz@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2017-06-06 20:18:36 +02:00
..
esp-pci.c hw/scsi: Concentrate -drive if=scsi auto-create in one place 2017-02-21 13:17:45 +01:00
esp.c hw/scsi: Concentrate -drive if=scsi auto-create in one place 2017-02-21 13:17:45 +01:00
lsi53c895a.c scsi/lsi53c895a: Remove unused lsi_mem_*() return value 2017-06-04 18:42:55 +03:00
Makefile.objs vhost-scsi: create a vhost-scsi-common abstraction 2017-05-05 12:10:00 +02:00
megasas.c scsi: avoid an off-by-one error in megasas_mmio_write 2017-05-05 12:09:59 +02:00
mfi.h Clean up header guards that don't match their file name 2016-07-12 16:19:16 +02:00
mpi.h hw: Add support for LSI SAS1068 (mptsas) device 2016-02-09 15:45:26 +01:00
mptconfig.c scsi: mptconfig: fix misuse of MPTSAS_CONFIG_PACK 2016-09-13 19:08:46 +02:00
mptendian.c hw: Add support for LSI SAS1068 (mptsas) device 2016-02-09 15:45:26 +01:00
mptsas.c scsi: mptsas: fix the wrong reading size in fetch request 2017-03-14 13:26:37 +01:00
mptsas.h mptsas: really fix migration compatibility 2016-08-03 18:44:56 +02:00
scsi-bus.c Changes to -drive without if= and with if=scsi 2017-02-21 13:58:50 +00:00
scsi-disk.c hw/block: Request permissions 2017-02-28 20:40:36 +01:00
scsi-generic.c scsi-generic: Fill in opt_xfer_len in INQUIRY reply if it is zero 2017-03-27 17:02:07 +02:00
spapr_vscsi.c hw: Deprecate -drive if=scsi with non-onboard HBAs 2017-02-21 13:17:45 +01:00
srp.h spapr-vscsi: add task management 2013-09-12 08:46:21 +02:00
trace-events spapr_vscsi: fix build error introduced by f19661c8 2016-10-05 11:05:28 +11:00
vhost-scsi-common.c vhost-scsi: create a vhost-scsi-common abstraction 2017-05-05 12:10:00 +02:00
vhost-scsi.c migration: Create migration/blocker.h 2017-05-17 12:04:59 +02:00
viosrp.h hw: move private headers to hw/ subdirectories. 2013-04-08 18:13:16 +02:00
virtio-scsi-dataplane.c virtio-scsi: Fix acquire/release in dataplane handlers 2017-03-24 11:49:03 +01:00
virtio-scsi.c virtio-scsi: Unset hotplug handler when unrealize 2017-06-06 20:18:36 +02:00
vmw_pvscsi.c vmw_pvscsi: check message ring page count at initialisation 2017-05-05 12:09:59 +02:00
vmw_pvscsi.h scsi: VMWare PVSCSI paravirtual device implementation 2013-04-19 10:44:17 +02:00