diff mbox

[v3,10/8] use QSIMPLEQ_FOREACH_SAFE when freeing list elements

Message ID 1331023921-32694-1-git-send-email-pbonzini@redhat.com
State New
Headers show

Commit Message

Paolo Bonzini March 6, 2012, 8:52 a.m. UTC 
QSIMPLEQ_FOREACH will use the states pointer after the loop has freed it.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
---
	Found while (re)reviewing Jeff's patches.

 blockdev.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
diff mbox

Patch

diff --git a/blockdev.c b/blockdev.c
index 1fb2a17..9480dbb 100644
--- a/blockdev.c
+++ b/blockdev.c
@@ -775,7 +775,7 @@  void qmp_transaction(BlockdevActionList *dev_list, Error **errp)
 {
     int ret = 0;
     BlockdevActionList *dev_entry = dev_list;
-    BlkTransactionStates *states;
+    BlkTransactionStates *states, *next;
     char *new_source = NULL;
 
     QSIMPLEQ_HEAD(snap_bdrv_states, BlkTransactionStates) snap_bdrv_states;
@@ -926,7 +926,7 @@  delete_and_fail:
         }
     }
 exit:
-    QSIMPLEQ_FOREACH(states, &snap_bdrv_states, entry) {
+    QSIMPLEQ_FOREACH_SAFE(states, &snap_bdrv_states, entry, next) {
         g_free(states);
     }
     g_free(new_source);