From: Corey Minyard <cminy...@mvista.com>

This will result in a double free on close, because it's freed
in qemu_chr_delete() right after calling the close function.

Signed-off-by: Corey Minyard <cminy...@mvista.com>
---
 qemu-char.c |    1 -
 1 files changed, 0 insertions(+), 1 deletions(-)

diff --git a/qemu-char.c b/qemu-char.c
index 9e3ac40..a94d9ef 100644
--- a/qemu-char.c
+++ b/qemu-char.c
@@ -1949,7 +1949,6 @@ static void win_stdio_close(CharDriverState *chr)
     }
 
     g_free(chr->opaque);
-    g_free(chr);
     stdio_nb_clients--;
 }
 
-- 
1.7.4.1


Reply via email to