mirror of
https://gitlab.com/qemu-project/qemu.git
synced 2026-08-26 22:23:12 -04:00
When bdrv_snapshot_list() returns a negative error code, sn_tab is
uninitialized. The loop does not execute (since i=0 < negative is
false), but the code falls through to g_free(sn_tab) which frees
an uninitialized pointer.
Fixes:
|
||
|---|---|---|
| .. | ||
| meson.build | ||
| replay-audio.c | ||
| replay-char.c | ||
| replay-debugging.c | ||
| replay-events.c | ||
| replay-input.c | ||
| replay-internal.c | ||
| replay-internal.h | ||
| replay-net.c | ||
| replay-random.c | ||
| replay-snapshot.c | ||
| replay-time.c | ||
| replay.c | ||
| stubs-system.c | ||
| trace-events | ||
| trace.h | ||