chardev/wctable: don't free the instance in wctablet_chr_finalize
authorDaniil Tatianin <d-tatianin@yandex-team.ru>
Wed, 17 Nov 2021 14:23:49 +0000 (17:23 +0300)
committerPaolo Bonzini <pbonzini@redhat.com>
Fri, 19 Nov 2021 09:24:50 +0000 (10:24 +0100)
commitfdc6e168181d06391711171b7c409b34f2981ced
tree12664dfcf48c0f1bb85ae17efa499d1d53c39302
parentfbab8cc24ded54f371ab9db2c9998be23c158e62
chardev/wctable: don't free the instance in wctablet_chr_finalize

Object is supposed to be freed by invoking obj->free, and not
obj->instance_finalize. This would lead to use-after-free followed by
double free in object_unref/object_finalize.

Signed-off-by: Daniil Tatianin <d-tatianin@yandex-team.ru>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-Id: <20211117142349.836279-1-d-tatianin@yandex-team.ru>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
chardev/wctablet.c