On Mon, Oct 06, 2014 at 09:33:45AM -0700, Chris Spiegel wrote: > If an error occurs in bdrv_snapshot_delete_by_id_or_name(), "err" is > freed. If "err" is not set to NULL before calling > bdrv_snapshot_delete_by_id_or_name() again, it will not be updated on > error, and will be freed again. > > This can be triggered by starting a VM with at least two drives and then > attempting to delete a non-existent snapshot. > > Signed-off-by: Chris Spiegel <chris.spie...@cypherpath.com> > --- > savevm.c | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-)
Thanks, applied to my block tree: https://github.com/stefanha/qemu/commits/block Stefan
pgpsogTGU8abL.pgp
Description: PGP signature
