filter-mirror: segfault when specifying non existent device
authorEduardo Otubo <otubo@redhat.com>
Fri, 29 Sep 2017 12:03:39 +0000 (14:03 +0200)
committerMichael Tokarev <mjt@tls.msk.ru>
Mon, 16 Oct 2017 20:16:06 +0000 (23:16 +0300)
When using filter-mirror like the example below where the interface
'ndev0' does not exist on the host, QEMU crashes into segmentation
fault.

 $ qemu-system-x86_64 -S -machine pc -netdev user,id=ndev0 -object filter-mirror,id=test-object,netdev=ndev0

This happens because the function filter_mirror_setup() does not check
if the device actually exists and still keep on processing calling
qemu_chr_find(). This patch fixes this issue.

Signed-off-by: Eduardo Otubo <otubo@redhat.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
net/filter-mirror.c

index 90e2c92337852816ec854e6c4e56259ea4d8a9b7..ce0dc23c2aa5cca0d036988d3b0b9e5a9f6a6200 100644 (file)
@@ -213,6 +213,12 @@ static void filter_mirror_setup(NetFilterState *nf, Error **errp)
     MirrorState *s = FILTER_MIRROR(nf);
     Chardev *chr;
 
+    if (s->outdev == NULL) {
+        error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND, "filter-mirror parameter"\
+                  " 'outdev' cannot be empty");
+        return;
+    }
+
     chr = qemu_chr_find(s->outdev);
     if (chr == NULL) {
         error_set(errp, ERROR_CLASS_DEVICE_NOT_FOUND,