On 19/7/26 13:32, [email protected] wrote:
From: Marc-André Lureau <[email protected]>

When bdrv_snapshot_list() returns a negative error code, sn_tab is
uninitialized. The loop does not execute (since i=0 < negative is
false), but the code falls through to g_free(sn_tab) which frees
an uninitialized pointer.

Fixes: f6baed3d1485 ("replay: implement replay-seek command")
Signed-off-by: Marc-Andre Lureau <[email protected]>
---
  replay/replay-debugging.c | 23 ++++++++++++-----------
  1 file changed, 12 insertions(+), 11 deletions(-)

Patch queued, thanks.

Reply via email to