File 0420-ide-ahci-call-cleanup-function-in-a.patch of Package qemu.8405
From 4e48b3a9ddc5972df17828934dd70793f557bf38 Mon Sep 17 00:00:00 2001
From: Li Qiang <liq3ea@gmail.com>
Date: Wed, 15 Mar 2017 20:50:14 -0400
Subject: [PATCH] ide: ahci: call cleanup function in ahci unit
This can avoid memory leak when hotunplug the ahci device.
Signed-off-by: Li Qiang <liqiang6-s@360.cn>
Message-id: 1488449293-80280-4-git-send-email-liqiang6-s@360.cn
Signed-off-by: John Snow <jsnow@redhat.com>
(cherry picked from commit d68f0f778e7f4fbd674627274267f269e40f0b04)
[BSC#1042801 CVE-2017-9373]
Signed-off-by: Bruce Rogers <brogers@suse.com>
---
hw/ide/ahci.c | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/hw/ide/ahci.c b/hw/ide/ahci.c
index da4865b96e..5ea047a357 100644
--- a/hw/ide/ahci.c
+++ b/hw/ide/ahci.c
@@ -1217,6 +1217,18 @@ void ahci_init(AHCIState *s, DeviceState *qdev, AddressSpace *as, int ports)
void ahci_uninit(AHCIState *s)
{
+ int i, j;
+
+ for (i = 0; i < s->ports; i++) {
+ AHCIDevice *ad = &s->dev[i];
+
+ for (j = 0; j < 2; j++) {
+ IDEState *s = &ad->port.ifs[j];
+
+ ide_exit(s);
+ }
+ }
+
memory_region_destroy(&s->mem);
memory_region_destroy(&s->idp);
g_free(s->dev);