All of lore.kernel.org
 help / color / mirror / Atom feed
From: David Gibson <david@gibson.dropbear.id.au>
To: peter.maydell@linaro.org
Cc: agraf@suse.de, aik@ozlabs.ru, mdroth@linux.vnet.ibm.com,
	sbobroff@redhat.com, sursingh@redhat.com, qemu-ppc@nongnu.org,
	qemu-devel@nongnu.org, Greg Kurz <groug@kaod.org>,
	David Gibson <david@gibson.dropbear.id.au>
Subject: [Qemu-devel] [PULL 07/18] spapr: ensure core_slot isn't NULL in spapr_core_unplug()
Date: Thu, 25 May 2017 13:51:21 +1000	[thread overview]
Message-ID: <20170525035132.24268-8-david@gibson.dropbear.id.au> (raw)
In-Reply-To: <20170525035132.24268-1-david@gibson.dropbear.id.au>

From: Greg Kurz <groug@kaod.org>

If we go that far on the path of hot-removing a core and we find out that
the core-id is invalid, then we have a serious bug.

Let's make it explicit with an assert() instead of dereferencing a NULL
pointer.

This fixes Coverity issue CID 1375404.

Signed-off-by: Greg Kurz <groug@kaod.org>
Reviewed-by: Igor Mammedov <imammedo@redhat.com>
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
---
 hw/ppc/spapr.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hw/ppc/spapr.c b/hw/ppc/spapr.c
index 35dceb0..c912eaa 100644
--- a/hw/ppc/spapr.c
+++ b/hw/ppc/spapr.c
@@ -2725,6 +2725,7 @@ static void spapr_core_unplug(HotplugHandler *hotplug_dev, DeviceState *dev,
     CPUCore *cc = CPU_CORE(dev);
     CPUArchId *core_slot = spapr_find_cpu_slot(ms, cc->core_id, NULL);
 
+    assert(core_slot);
     core_slot->cpu = NULL;
     object_unparent(OBJECT(dev));
 }
-- 
2.9.4

  parent reply	other threads:[~2017-05-25  3:51 UTC|newest]

Thread overview: 25+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-05-25  3:51 [Qemu-devel] [PULL 00/18] ppc-for-2.10 queue 20170525 David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 01/18] target/ppc: reset reservation in do_rfi() David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 02/18] ppc/xics: simplify prototype of xics_spapr_init() David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 03/18] spapr: sanitize error handling in spapr_ics_create() David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 04/18] spapr-cpu-core: release ICP object when realization fails David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 05/18] spapr: Consolidate HPT freeing code into a routine David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 06/18] xics_kvm: cache already enabled vCPU ids David Gibson
2017-05-25  3:51 ` David Gibson [this message]
2017-05-25  3:51 ` [Qemu-devel] [PULL 08/18] hw/ppc/spapr_events.c: removing 'exception' from sPAPREventLogEntry David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 09/18] spapr_cpu_core: drop reference on ICP object during CPU realization David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 10/18] spapr: fix error reporting in xics_system_init() David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 11/18] pseries: Split CAS PVR negotiation out into a separate function David Gibson
2017-05-29 21:14   ` [Qemu-devel] [Qemu-ppc] " Greg Kurz
2017-05-31  6:33     ` David Gibson
2017-05-31  9:01       ` Greg Kurz
2017-05-25  3:51 ` [Qemu-devel] [PULL 12/18] pseries: Restore support for total vcpus not a multiple of threads-per-core for old machine types David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 13/18] spapr: add pre_plug function for memory David Gibson
2017-06-06 15:00   ` Peter Maydell
2017-06-06 15:10     ` Greg Kurz
2017-05-25  3:51 ` [Qemu-devel] [PULL 14/18] hw/ppc/spapr.c: adding pending_dimm_unplugs to sPAPRMachineState David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 15/18] hw/ppc: removing drc->detach_cb and drc->detach_cb_opaque David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 16/18] hw/ppc: migrating the DRC state of hotplugged devices David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 17/18] hw/ppc/spapr.c: recover pending LMB unplug info in spapr_lmb_release David Gibson
2017-05-25  3:51 ` [Qemu-devel] [PULL 18/18] xics: add unrealize handler David Gibson
2017-05-30  8:45 ` [Qemu-devel] [PULL 00/18] ppc-for-2.10 queue 20170525 Stefan Hajnoczi

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20170525035132.24268-8-david@gibson.dropbear.id.au \
    --to=david@gibson.dropbear.id.au \
    --cc=agraf@suse.de \
    --cc=aik@ozlabs.ru \
    --cc=groug@kaod.org \
    --cc=mdroth@linux.vnet.ibm.com \
    --cc=peter.maydell@linaro.org \
    --cc=qemu-devel@nongnu.org \
    --cc=qemu-ppc@nongnu.org \
    --cc=sbobroff@redhat.com \
    --cc=sursingh@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.