vhost-user: disable chardev handlers on close

This otherwise causes a use-after-free if network backend cleanup is performed before character device cleanup. Cc: Marc-André Lureau <[email protected]> Signed-off-by: Paolo Bonzini <[email protected]>
ilg-archived · Jun 29, 2016 · 25f0d2a · 25f0d2a
1 parent 634d39b
commit 25f0d2a
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/net/vhost-user.c b/net/vhost-user.c
@@ -151,6 +151,11 @@ static void vhost_user_cleanup(NetClientState *nc)
         vhost_net_cleanup(s->vhost_net);
         s->vhost_net = NULL;
     }
+    if (s->chr) {
+        qemu_chr_add_handlers(s->chr, NULL, NULL, NULL, NULL);
+        qemu_chr_fe_release(s->chr);
+        s->chr = NULL;
+    }
 
     qemu_purge_queued_packets(nc);
 }