The most important part is a fix for use-after-free that I found while testing CD-ROM eject.
Paolo Bonzini (4): scsi-disk: fail READ CAPACITY if LBA != 0 but PMI == 0 scsi-disk: do not complete requests twice scsi-disk: bump SCSIRequest reference count until aio completion runs scsi-disk: fix retrying a flush hw/scsi-disk.c | 38 +++++++++++++++++++++++++++++--------- 2 files changed, 30 insertions(+), 10 deletions(-) -- 1.7.6
