On 7/19/26 14:32, [email protected] wrote:
From: Marc-André Lureau <[email protected]>When bdrv_snapshot_list() returns a negative error code, sn_tab is uninitialized. The loop does not execute (since i=0 < negative is false), but the code falls through to g_free(sn_tab) which frees an uninitialized pointer. Fixes: f6baed3d1485 ("replay: implement replay-seek command") Signed-off-by: Marc-Andre Lureau <[email protected]> --- replay/replay-debugging.c | 23 ++++++++++++----------- 1 file changed, 12 insertions(+), 11 deletions(-)
I'm picking this up for the current stable qemu series. Please let me know if I should not. Thanks, /mjt
