3d039dc5d8
CVE-2016-9603: cirrus: heap buffer overflow via vnc connection (bz #1432040) CVE-2017-7377: 9pfs: fix file descriptor leak (bz #1437872) CVE-2017-7980: cirrus: OOB r/w access issues in bitblt (bz #1444372) CVE-2017-8112: vmw_pvscsi: infinite loop in pvscsi_log2 (bz #1445622) CVE-2017-8309: audio: host memory lekage via capture buffer (bz #1446520) CVE-2017-8379: input: host memory lekage via keyboard events (bz #1446560) CVE-2017-8380: scsi: megasas: out-of-bounds read in megasas_mmio_write (bz #1446578) CVE-2017-9060: virtio-gpu: host memory leakage in Virtio GPU device (bz #1452598) CVE-2017-9310: net: infinite loop in e1000e NIC emulation (bz #1452623) CVE-2017-9330: usb: ohci: infinite loop due to incorrect return value (bz #1457699) CVE-2017-9374: usb: ehci host memory leakage during hotunplug (bz #1459137) CVE-2017-10806: usb-redirect: stack buffer overflow in debug logging (bz #1468497)
44 lines
1.5 KiB
Diff
44 lines
1.5 KiB
Diff
From: Li Qiang <liqiang6-s@360.cn>
|
|
Date: Mon, 28 Nov 2016 17:49:04 -0800
|
|
Subject: [PATCH] watchdog: 6300esb: add exit function
|
|
|
|
When the Intel 6300ESB watchdog is hot unplug. The timer allocated
|
|
in realize isn't freed thus leaking memory leak. This patch avoid
|
|
this through adding the exit function.
|
|
|
|
Signed-off-by: Li Qiang <liqiang6-s@360.cn>
|
|
Message-Id: <583cde9c.3223ed0a.7f0c2.886e@mx.google.com>
|
|
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
|
|
(cherry picked from commit eb7a20a3616085d46aa6b4b4224e15587ec67e6e)
|
|
---
|
|
hw/watchdog/wdt_i6300esb.c | 9 +++++++++
|
|
1 file changed, 9 insertions(+)
|
|
|
|
diff --git a/hw/watchdog/wdt_i6300esb.c b/hw/watchdog/wdt_i6300esb.c
|
|
index a83d951213..49b3cd188a 100644
|
|
--- a/hw/watchdog/wdt_i6300esb.c
|
|
+++ b/hw/watchdog/wdt_i6300esb.c
|
|
@@ -428,6 +428,14 @@ static void i6300esb_realize(PCIDevice *dev, Error **errp)
|
|
/* qemu_register_coalesced_mmio (addr, 0x10); ? */
|
|
}
|
|
|
|
+static void i6300esb_exit(PCIDevice *dev)
|
|
+{
|
|
+ I6300State *d = WATCHDOG_I6300ESB_DEVICE(dev);
|
|
+
|
|
+ timer_del(d->timer);
|
|
+ timer_free(d->timer);
|
|
+}
|
|
+
|
|
static WatchdogTimerModel model = {
|
|
.wdt_name = "i6300esb",
|
|
.wdt_description = "Intel 6300ESB",
|
|
@@ -441,6 +449,7 @@ static void i6300esb_class_init(ObjectClass *klass, void *data)
|
|
k->config_read = i6300esb_config_read;
|
|
k->config_write = i6300esb_config_write;
|
|
k->realize = i6300esb_realize;
|
|
+ k->exit = i6300esb_exit;
|
|
k->vendor_id = PCI_VENDOR_ID_INTEL;
|
|
k->device_id = PCI_DEVICE_ID_INTEL_ESB_9;
|
|
k->class_id = PCI_CLASS_SYSTEM_OTHER;
|