To save the bs pointer for drive_backup_clean, pull the assignment to state->bs up. It will not be a problem for drive_backup_abort because state->job will still be NULL.
Signed-off-by: Fam Zheng <f...@redhat.com> --- blockdev.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/blockdev.c b/blockdev.c index a8d5b10..d7526f6 100644 --- a/blockdev.c +++ b/blockdev.c @@ -1586,6 +1586,8 @@ static void drive_backup_prepare(BlkTransactionState *common, Error **errp) /* AioContext is released in .clean() */ state->aio_context = bdrv_get_aio_context(bs); aio_context_acquire(state->aio_context); + bdrv_lock(bs); + state->bs = bs; qmp_drive_backup(backup->device, backup->target, backup->has_format, backup->format, @@ -1601,7 +1603,6 @@ static void drive_backup_prepare(BlkTransactionState *common, Error **errp) return; } - state->bs = bs; state->job = state->bs->job; } @@ -1621,6 +1622,7 @@ static void drive_backup_clean(BlkTransactionState *common) DriveBackupState *state = DO_UPCAST(DriveBackupState, common, common); if (state->aio_context) { + bdrv_unlock(state->bs); aio_context_release(state->aio_context); } } -- 2.4.1