On 14.02.2012 21:48, Eric Blake wrote: > Bug introduced in commit 35abced. On an inactive domain, > $ virsh snapshot-create-as dom snap > $ virsh snapshot-create dom > $ virsh snapshot-create dom > $ virsh snapshot-delete --children dom snap > could crash libvirtd, due to a use-after-free that results > when the callback freed the current element in the iteration. > > * src/conf/domain_conf.c (virDomainSnapshotForEachChild) > (virDomainSnapshotActOnDescendant): Allow iteration to delete > current child. > --- > src/conf/domain_conf.c | 5 +++-- > 1 files changed, 3 insertions(+), 2 deletions(-) > ACK -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list